@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  653.680472] binder_alloc: 22197: binder_alloc_buf, no vma
** 1 printk messages dropped ** [  653.681273] binder_alloc: 22197: binder_alloc_buf, no vma
06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:43 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  653.774961] binder: 22222:22225 transaction failed 29189/-22, size 24-8 line 3014
06:11:43 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  653.779860] binder: 22223:22230 transaction failed 29189/-22, size 24-8 line 3014
06:11:43 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  653.938094] binder: 22250:22253 BC_INCREFS_DONE u0000000000000000 no match
06:11:43 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:43 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 5 printk messages dropped ** [  654.104233] binder: 22271:22277 transaction failed 29189/-3, size 24-8 line 3137
06:11:43 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  654.178247] binder: 22282:22301 transaction failed 29189/-22, size 24-8 line 3014
06:11:43 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  654.264739] binder: 22313:22320 transaction failed 29189/-3, size 24-8 line 3137
06:11:43 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:43 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:43 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 6 printk messages dropped ** [  654.378542] binder: 22340:22344 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:44 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  654.381199] binder: 22337:22347 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  654.516751] binder: 22359:22361 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:44 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:44 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:44 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 9 printk messages dropped ** [  654.694445] binder: 22394:22397 BC_INCREFS_DONE u0000000000000000 no match
[  654.711437] binder: 22395:22399 transaction failed 29189/-22, size 24-8 line 3014
[  654.774347] binder: 22400:22408 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:44 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 2 printk messages dropped ** [  654.818926] binder: 22411:22421 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  654.869628] binder_alloc: 22425: binder_alloc_buf, no vma
** 2 printk messages dropped ** [  654.927959] binder: 22439:22445 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 3 printk messages dropped ** [  654.991880] binder: 22456:22458 transaction failed 29189/-22, size 24-8 line 3014
06:11:44 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:44 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:44 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 7 printk messages dropped ** [  655.163144] binder_alloc: 22493: binder_alloc_buf, no vma
06:11:44 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:44 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  655.163188] binder: 22493:22497 transaction failed 29189/-3, size 24-8 line 3137
06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  655.273524] binder_alloc: 22513: binder_alloc_buf, no vma
06:11:45 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  655.273579] binder: 22513:22517 transaction failed 29189/-3, size 24-8 line 3137
06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  655.330387] binder: 22528:22534 transaction failed 29189/-22, size 24-8 line 3014
06:11:45 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 8 printk messages dropped ** [  655.855616] binder_alloc: 22562: binder_alloc_buf, no vma
06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 1 printk messages dropped ** [  655.909425] binder: 22565:22572 transaction failed 29189/-22, size 24-8 line 3014
06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  655.941362] binder_alloc: 22586: binder_alloc_buf, no vma
06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 3 printk messages dropped ** [  655.994159] binder: 22594:22595 BC_INCREFS_DONE u0000000000000000 no match
06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  656.066658] binder: 22609:22614 BC_INCREFS_DONE u0000000000000000 no match
[  656.069882] binder: 22602:22612 transaction failed 29189/-22, size 24-8 line 3014
06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:45 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  656.135948] binder_alloc: 22629: binder_alloc_buf, no vma
[  656.135995] binder: 22629:22634 transaction failed 29189/-3, size 24-8 line 3137
06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 7 printk messages dropped ** [  656.285272] binder: 22654:22663 transaction failed 29189/-3, size 24-8 line 3137
06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  656.340636] binder: 22665:22672 transaction failed 29189/-22, size 24-8 line 3014
06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  656.379020] binder: 22671:22673 transaction failed 29189/-3, size 24-8 line 3137
06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:45 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:45 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:45 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  656.465254] binder_alloc: 22686: binder_alloc_buf, no vma
06:11:45 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 1 printk messages dropped ** [  656.473339] binder: 22684:22699 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  656.526382] binder: 22711:22712 BC_INCREFS_DONE u0000000000000000 no match
06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  656.691496] binder: 22733:22739 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  656.753662] binder: 22748:22754 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  656.826604] binder: 22756:22757 BC_INCREFS_DONE u0000000000000000 no match
06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  656.901656] binder: 22766:22782 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  656.921317] binder: 22786:22794 transaction failed 29189/-22, size 24-8 line 3014
** 2 printk messages dropped ** [  656.949185] binder: 22800:22802 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 5 printk messages dropped ** [  657.054909] binder: 22817:22826 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  657.168749] binder: 22831:22848 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  657.330809] binder: 22873:22882 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 4 printk messages dropped ** [  657.414486] binder: 22896:22900 transaction failed 29189/-22, size 24-8 line 3014
06:11:46 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:46 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:46 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 3 printk messages dropped ** [  657.492833] binder: 22916:22922 transaction failed 29189/-22, size 24-8 line 3014
06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  657.521066] binder: 22911:22927 transaction failed 29189/-3, size 24-8 line 3137
06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  657.641797] binder: 22945:22956 transaction failed 29189/-3, size 24-8 line 3137
06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  657.766107] binder: 22955:22974 transaction failed 29189/-22, size 24-8 line 3014
06:11:47 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:47 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  657.799407] binder: 22982:22987 BC_INCREFS_DONE u0000000000000000 no match
06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  657.918662] binder: 22995:23003 transaction failed 29189/-22, size 24-8 line 3014
06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:47 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  658.039676] binder: 23031:23033 transaction failed 29189/-22, size 24-8 line 3014
06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  658.039813] binder: 23031:23033 BC_INCREFS_DONE u0000000000000000 no match
06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 4 printk messages dropped ** [  658.127091] binder_alloc: 23051: binder_alloc_buf, no vma
06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 2 printk messages dropped ** [  658.182687] binder: 23072:23076 transaction failed 29189/-22, size 24-8 line 3014
06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  658.182798] binder: 23072:23076 BC_INCREFS_DONE u0000000000000000 no match
[  658.217521] binder_alloc: 23079: binder_alloc_buf, no vma
06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  658.291500] binder: 23097:23100 BC_INCREFS_DONE u0000000000000000 no match
06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:47 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  658.380066] binder: 23129:23133 transaction failed 29189/-22, size 24-8 line 3014
06:11:47 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:47 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:47 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  658.419769] binder: 23139:23143 transaction failed 29189/-3, size 24-8 line 3137
06:11:47 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  658.511884] binder: 23153:23157 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  658.625740] binder: 23177:23184 transaction failed 29189/-3, size 24-8 line 3137
06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  658.727824] binder: 23190:23197 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 1 printk messages dropped ** [  658.767605] binder: 23214:23217 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  658.899434] binder: 23247:23251 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  658.968973] binder: 23243:23265 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  659.015264] binder: 23273:23278 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  659.045999] binder: 23271:23286 transaction failed 29189/-3, size 24-8 line 3137
06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  659.140491] binder: 23300:23309 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 9 printk messages dropped ** [  659.357530] binder: 23324:23326 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:48 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  659.368703] binder: 23324:23326 BC_INCREFS_DONE u0000000000000000 no match
[  659.391504] binder: 23349:23357 transaction failed 29189/-22, size 24-8 line 3014
06:11:48 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:48 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:48 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  659.437198] binder_alloc: 23347: binder_alloc_buf, no vma
** 1 printk messages dropped ** [  659.438747] binder: 23359:23368 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  659.533078] binder: 23389:23395 BC_INCREFS_DONE u0000000000000000 no match
06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  659.580342] binder: 23401:23403 transaction failed 29189/-22, size 24-8 line 3014
[  659.592159] binder_alloc: 23392: binder_alloc_buf, no vma
06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  659.707906] binder: 23417:23431 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  659.792445] binder: 23453:23454 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  659.881963] binder: 23455:23459 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  659.920560] binder: 23478:23483 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  659.975804] binder: 23492:23496 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  660.133447] binder: 23520:23525 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  660.185751] binder_alloc: 23534: binder_alloc_buf, no vma
06:11:49 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  660.225976] binder: 23541:23547 transaction failed 29189/-22, size 24-8 line 3014
** 5 printk messages dropped ** [  660.363079] binder: 23575:23579 transaction failed 29189/-22, size 24-8 line 3014
06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:49 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:49 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  660.449416] binder: 23594:23601 transaction failed 29189/-22, size 24-8 line 3014
** 1 printk messages dropped ** [  660.525086] binder: 23609:23615 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 7 printk messages dropped ** [  660.675628] binder_alloc: 23644: binder_alloc_buf, no vma
06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  660.802408] binder: 23668:23672 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  660.856028] binder: 23663:23678 BC_INCREFS_DONE u0000000000000000 no match
06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  660.918151] binder: 23676:23683 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  660.978819] binder: 23692:23703 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 6 printk messages dropped ** [  661.087611] binder: 23721:23729 transaction failed 29189/-3, size 24-8 line 3137
[  661.143900] binder: 23731:23732 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  661.277721] binder: 23763:23769 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 1 printk messages dropped ** [  661.288090] binder: 23758:23768 transaction failed 29189/-3, size 24-8 line 3137
06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  661.346056] binder_alloc: 23783: binder_alloc_buf, no vma
06:11:50 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  661.400864] binder: 23792:23802 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:50 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  661.430057] binder: 23803:23807 transaction failed 29189/-22, size 24-8 line 3014
06:11:50 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:50 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:50 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  661.503041] binder: 23812:23824 transaction failed 29189/-3, size 24-8 line 3137
06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  661.601284] binder: 23815:23840 BC_INCREFS_DONE u0000000000000000 no match
06:11:51 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  661.674375] binder: 23847:23858 transaction failed 29189/-3, size 24-8 line 3137
06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 5 printk messages dropped ** [  661.758516] binder: 23873:23877 transaction failed 29189/-3, size 24-8 line 3137
06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  661.793385] binder: 23871:23884 BC_INCREFS_DONE u0000000000000000 no match
06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  661.959123] binder_alloc: 23915: binder_alloc_buf, no vma
[  661.959167] binder: 23915:23920 transaction failed 29189/-3, size 24-8 line 3137
06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  662.001367] binder: 23906:23918 transaction failed 29189/-22, size 24-8 line 3014
06:11:51 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:51 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  662.148932] binder: 23959:23962 transaction failed 29189/-22, size 24-8 line 3014
06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  662.255901] binder: 23971:23973 transaction failed 29189/-22, size 24-8 line 3014
** 2 printk messages dropped ** [  662.282243] binder: 23974:23984 transaction failed 29189/-3, size 24-8 line 3137
06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 5 printk messages dropped ** [  662.383447] binder: 23994:24005 transaction failed 29189/-3, size 24-8 line 3137
06:11:51 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  662.490650] binder: 24022:24031 transaction failed 29189/-22, size 24-8 line 3014
06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:51 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 2 printk messages dropped ** [  662.509736] binder: 24035:24041 transaction failed 29189/-22, size 24-8 line 3014
06:11:51 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:51 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  662.625993] binder: 24057:24070 transaction failed 29189/-22, size 24-8 line 3014
06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  662.753969] binder: 24084:24090 transaction failed 29189/-22, size 24-8 line 3014
06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 2 printk messages dropped ** [  662.768784] binder_alloc: 24088: binder_alloc_buf, no vma
06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  662.768826] binder: 24088:24096 transaction failed 29189/-3, size 24-8 line 3137
06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 4 printk messages dropped ** [  662.897981] binder: 24114:24120 BC_INCREFS_DONE u0000000000000000 no match
06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  662.956405] binder: 24135:24141 BC_INCREFS_DONE u0000000000000000 no match
06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 1 printk messages dropped ** [  663.020981] binder: 24151:24162 transaction failed 29189/-3, size 24-8 line 3137
06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  663.105763] binder: 24171:24174 BC_INCREFS_DONE u0000000000000000 no match
06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  663.136202] binder_alloc: 24173: binder_alloc_buf, no vma
06:11:52 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  663.226142] binder: 24190:24196 transaction failed 29189/-22, size 24-8 line 3014
06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  663.271142] binder: 24201:24210 transaction failed 29189/-22, size 24-8 line 3014
06:11:52 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  663.350771] binder: 24218:24224 transaction failed 29189/-22, size 24-8 line 3014
06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  663.393263] binder: 24230:24238 BC_INCREFS_DONE u0000000000000000 no match
06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:52 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:52 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:52 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  663.472741] binder: 24247:24251 transaction failed 29189/-22, size 24-8 line 3014
06:11:52 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  663.523290] binder: 24254:24257 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  663.647299] binder_alloc: 24280: binder_alloc_buf, no vma
** 3 printk messages dropped ** [  663.750325] binder_alloc: 24298: binder_alloc_buf, no vma
06:11:53 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  663.750367] binder: 24298:24307 transaction failed 29189/-3, size 24-8 line 3137
06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 4 printk messages dropped ** [  663.850719] binder: 24328:24334 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  663.890262] binder: 24332:24340 BC_INCREFS_DONE u0000000000000000 no match
[  663.949352] binder_alloc: 24351: binder_alloc_buf, no vma
06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  663.968908] binder: 24350:24366 BC_INCREFS_DONE u0000000000000000 no match
06:11:53 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  664.131247] binder: 24394:24400 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  664.133313] binder: 24391:24396 transaction failed 29189/-3, size 24-8 line 3137
[  664.138108] binder: 24384:24398 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  664.303455] binder: 24432:24438 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  664.313408] binder: 24433:24441 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  664.400514] binder: 24451:24458 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  664.418483] binder: 24453:24461 transaction failed 29189/-22, size 24-8 line 3014
06:11:53 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:53 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:53 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  664.558703] binder: 24492:24493 transaction failed 29189/-3, size 24-8 line 3137
06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 1 printk messages dropped ** [  664.610622] binder: 24500:24506 transaction failed 29189/-22, size 24-8 line 3014
06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  664.659078] binder: 24489:24505 transaction failed 29189/-22, size 24-8 line 3014
06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 5 printk messages dropped ** [  664.743745] binder: 24525:24533 transaction failed 29189/-22, size 24-8 line 3014
06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  664.824275] binder: 24537:24548 BC_INCREFS_DONE u0000000000000000 no match
06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 3 printk messages dropped ** [  664.933989] binder: 24563:24564 BC_INCREFS_DONE u0000000000000000 no match
06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  665.027033] binder: 24574:24587 transaction failed 29189/-22, size 24-8 line 3014
06:11:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  665.182883] binder: 24599:24616 BC_INCREFS_DONE u0000000000000000 no match
06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  665.297694] binder: 24637:24645 transaction failed 29189/-22, size 24-8 line 3014
06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  665.303916] binder_alloc: 24646: binder_alloc_buf, no vma
** 2 printk messages dropped ** [  665.340614] binder: 24658:24660 BC_INCREFS_DONE u0000000000000000 no match
06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:54 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  665.423954] binder: 24651:24670 transaction failed 29189/-22, size 24-8 line 3014
06:11:54 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:54 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  665.527487] binder: 24686:24696 transaction failed 29189/-22, size 24-8 line 3014
06:11:55 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  665.573481] binder: 24697:24705 transaction failed 29189/-22, size 24-8 line 3014
06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  665.688768] binder: 24708:24729 transaction failed 29189/-3, size 24-8 line 3137
06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 6 printk messages dropped ** [  665.804305] binder: 24761:24769 transaction failed 29189/-22, size 24-8 line 3014
** 1 printk messages dropped ** [  665.814835] binder: 24760:24766 BC_INCREFS_DONE u0000000000000000 no match
06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  665.935245] binder: 24791:24802 BC_INCREFS_DONE u0000000000000000 no match
06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  666.003688] binder_alloc: 24813: binder_alloc_buf, no vma
06:11:55 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  666.071287] binder: 24827:24833 transaction failed 29189/-22, size 24-8 line 3014
06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 4 printk messages dropped ** [  666.163872] binder: 24843:24852 transaction failed 29189/-3, size 24-8 line 3137
06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  666.249227] binder: 24872:24875 transaction failed 29189/-22, size 24-8 line 3014
06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 8 printk messages dropped ** [  666.466075] binder: 24907:24908 transaction failed 29189/-22, size 24-8 line 3014
06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:55 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:55 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:55 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  666.586838] binder: 24928:24934 transaction failed 29189/-22, size 24-8 line 3014
06:11:55 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  666.682683] binder: 24943:24949 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  666.741737] binder_alloc: 24955: binder_alloc_buf, no vma
06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 2 printk messages dropped ** [  666.753298] binder: 24954:24965 BC_INCREFS_DONE u0000000000000000 no match
06:11:56 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  666.877420] binder_alloc: 24976: binder_alloc_buf, no vma
[  666.877462] binder: 24976:24996 transaction failed 29189/-3, size 24-8 line 3137
[  666.883926] binder: 24988:24994 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 3 printk messages dropped ** [  667.011689] binder: 25008:25020 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  667.012255] binder: 25017:25021 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  667.107474] binder: 25028:25032 transaction failed 29189/-3, size 24-8 line 3137
06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  667.176810] binder: 25042:25052 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  667.255147] binder_alloc: 25046: binder_alloc_buf, no vma
06:11:56 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  667.334183] binder: 25066:25082 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 6 printk messages dropped ** [  667.437158] binder: 25081:25106 transaction failed 29189/-3, size 24-8 line 3137
06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 5 printk messages dropped ** [  667.562596] binder: 25120:25138 BC_INCREFS_DONE u0000000000000000 no match
06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  667.639702] binder: 25143:25156 transaction failed 29189/-22, size 24-8 line 3014
06:11:56 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:56 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  667.783841] binder: 25182:25187 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  667.792454] binder: 25190:25192 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  667.850550] binder_alloc: 25196: binder_alloc_buf, no vma
06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:57 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  667.923465] binder: 25225:25226 transaction failed 29189/-22, size 24-8 line 3014
** 2 printk messages dropped ** [  668.005536] binder: 25235:25238 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  668.139250] binder: 25258:25261 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  668.158009] binder: 25253:25263 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  668.251118] binder: 25279:25282 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  668.354765] binder: 25306:25308 transaction failed 29189/-22, size 24-8 line 3014
[  668.378197] binder: 25302:25312 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  668.432964] binder: 25316:25320 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 2 printk messages dropped ** [  668.498971] binder: 25330:25333 transaction failed 29189/-3, size 24-8 line 3137
06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  668.600464] binder: 25336:25351 transaction failed 29189/-22, size 24-8 line 3014
[  668.603552] binder: 25336:25351 BC_INCREFS_DONE u0000000000000000 no match
[  668.627614] binder: 25349:25359 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  668.682197] binder: 25364:25368 transaction failed 29189/-22, size 24-8 line 3014
06:11:57 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:57 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:57 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 2 printk messages dropped ** [  668.764111] binder_alloc: 25374: binder_alloc_buf, no vma
06:11:57 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 1 printk messages dropped ** [  668.768161] binder: 25380:25385 transaction failed 29189/-22, size 24-8 line 3014
06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  668.866409] binder_alloc: 25394: binder_alloc_buf, no vma
[  668.866513] binder: 25401:25404 transaction failed 29189/-3, size 24-8 line 3137
06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  668.981125] binder: 25407:25429 transaction failed 29189/-22, size 24-8 line 3014
06:11:58 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  669.045165] binder: 25435:25440 transaction failed 29189/-22, size 24-8 line 3014
06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 5 printk messages dropped ** [  669.124721] binder: 25459:25461 BC_INCREFS_DONE u0000000000000000 no match
** 3 printk messages dropped ** [  669.203692] binder: 25464:25472 transaction failed 29189/-22, size 24-8 line 3014
06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  669.280935] binder: 25476:25486 transaction failed 29189/-22, size 24-8 line 3014
[  669.351950] binder: 25489:25494 transaction failed 29189/-22, size 24-8 line 3014
06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  669.361570] binder_alloc: 25496: binder_alloc_buf, no vma
06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  669.427640] binder: 25504:25524 transaction failed 29189/-22, size 24-8 line 3014
06:11:58 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

** 4 printk messages dropped ** [  669.514798] binder: 25516:25522 transaction failed 29189/-3, size 24-8 line 3137
** 1 printk messages dropped ** [  669.520239] binder: 25535:25538 BC_INCREFS_DONE u0000000000000000 no match
06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:58 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  669.654706] binder: 25559:25561 transaction failed 29189/-3, size 24-8 line 3137
06:11:58 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:58 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:58 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 5 printk messages dropped ** [  669.784596] binder: 25579:25591 transaction failed 29189/-3, size 24-8 line 3137
06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  669.800624] binder: 25599:25600 transaction failed 29189/-22, size 24-8 line 3014
06:11:59 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:59 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  669.879643] binder: 25607:25613 transaction failed 29189/-22, size 24-8 line 3014
06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 4 printk messages dropped ** [  669.938997] binder: 25621:25625 transaction failed 29189/-22, size 24-8 line 3014
** 1 printk messages dropped ** [  670.013624] binder: 25634:25637 BC_INCREFS_DONE u0000000000000000 no match
06:11:59 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 1 printk messages dropped ** [  670.065502] binder_alloc: 25641: binder_alloc_buf, no vma
06:11:59 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  670.065546] binder: 25641:25642 transaction failed 29189/-3, size 24-8 line 3137
[  670.096622] binder: 25647:25651 transaction failed 29189/-22, size 24-8 line 3014
06:11:59 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  670.098282] binder: 25654:25656 transaction failed 29189/-22, size 24-8 line 3014
[  670.138547] binder_alloc: 25659: binder_alloc_buf, no vma
06:11:59 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  670.138603] binder: 25659:25660 transaction failed 29189/-3, size 24-8 line 3137
[  670.214160] binder: 25666:25673 transaction failed 29189/-22, size 24-8 line 3014
[  670.221761] binder: 25662:25671 transaction failed 29189/-22, size 24-8 line 3014
[  670.221932] binder: 25662:25671 BC_INCREFS_DONE u0000000000000000 no match
[  670.233448] binder_alloc: 25675: binder_alloc_buf, no vma
[  670.233489] binder: 25675:25681 transaction failed 29189/-3, size 24-8 line 3137
[  670.270852] binder: 25674:25678 transaction failed 29189/-22, size 24-8 line 3014
[  670.283306] binder: 25685:25689 transaction failed 29189/-22, size 24-8 line 3014
[  670.307976] binder: 25683:25688 transaction failed 29189/-22, size 24-8 line 3014
[  670.308102] binder: 25683:25688 BC_INCREFS_DONE u0000000000000000 no match
[  670.367284] binder_alloc: 25693: binder_alloc_buf, no vma
06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  670.367328] binder: 25693:25702 transaction failed 29189/-3, size 24-8 line 3137
[  670.371923] binder: 25694:25703 transaction failed 29189/-22, size 24-8 line 3014
06:11:59 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:59 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:59 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  670.395365] binder: 25699:25706 transaction failed 29189/-22, size 24-8 line 3014
[  670.395492] binder: 25699:25706 BC_INCREFS_DONE u0000000000000000 no match
06:11:59 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  670.407385] binder: 25705:25708 transaction failed 29189/-22, size 24-8 line 3014
[  670.428376] binder_alloc: 25714: binder_alloc_buf, no vma
06:11:59 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370645f74617209000000000000000020756e636f6e66696e77645f753a7379734b656c5f723a676e736d6f645f743a7330473030303030303030a2f66cbc076d619c770130303030303030303030303000b0af438db8fc3dd70dd31f5cf241ac3eacda594ba9959c1128227465b9eb930c68aea65c1346b932af6e4fb26e8d1627133719a9e5f986402fc00283e59f12887b223c2a418cc8ba02b431daca0d2aa7e9e18a56bd75defa89486eab7ca0f40f0b842d87f1440995357f157adf5d838f12bd07000000fdd75be15564a7a0e93c7759ba3af0d4e509b84622e5365e8ae71a4be23d8fecd8f2638091c2213e84a94fd25e06a45ab55ddd"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:11:59 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:59 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:11:59 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  670.428420] binder: 25714:25718 transaction failed 29189/-3, size 24-8 line 3137
[  670.487201] binder: 25720:25721 transaction failed 29189/-22, size 24-8 line 3014
06:11:59 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  670.499766] binder: 25728:25733 transaction failed 29189/-22, size 24-8 line 3014
06:11:59 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:11:59 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  670.499906] binder: 25728:25733 BC_INCREFS_DONE u0000000000000000 no match
[  670.516084] binder: 25735:25736 transaction failed 29189/-22, size 24-8 line 3014
[  670.575248] binder_alloc: 25732: binder_alloc_buf, no vma
06:12:00 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:12:00 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:12:00 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:12:00 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:12:00 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

[  670.575295] binder: 25732:25739 transaction failed 29189/-3, size 24-8 line 3137
[  670.577529] binder: 25745:25748 transaction failed 29189/-22, size 24-8 line 3014
06:12:00 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:12:00 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:12:00 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[  670.578562] binder: 25745:25748 BC_INCREFS_DONE u0000000000000000 no match
06:12:00 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

** 3 printk messages dropped ** [  670.714553] binder_alloc: 25766: binder_alloc_buf, no vma
06:12:00 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:12:00 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:12:00 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:12:00 executing program 5:
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 3 printk messages dropped ** [  670.751251] binder: 25767:25772 BC_INCREFS_DONE u0000000000000000 no match
06:12:00 executing program 4:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = open(0x0, 0x20042, 0x20)
ioctl$TIOCLINUX3(r3, 0x541c, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r2)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

06:12:00 executing program 0:
r0 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100008000010000000000000000006de5cb78eba8667db20a3c06323f7fb6cf3dca22b162523fadee361efed9605b99f4336ddef368c0742f4bdac2a1cb26de79c46fb8ea671a017597aceedcb8d44a8ae5fa91916bf3f691187bb7f28028062299405223f180337d6c54075e5841902bbbc8c037786d70e71071bad29fbd9fdbba56a3243eeadde311d72f515927a18e689175b6b49c2d558213e33e6c7338ca63e767ee990d42b06c15abaa766e116170c1970b66db097c3b114a3579abb2f85cfa92f81dc6cae17f48f6"], 0x10}}], 0x1, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
pipe(&(0x7f0000000a40))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 2 printk messages dropped ** [  671.022107] binder: 25777:25795 transaction failed 29189/-22, size 24-8 line 3014
06:12:00 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)

06:12:00 executing program 3:
socket(0x200000000000011, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x81, 0xd)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x105)
fchdir(r0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x17, 0x401, 0x1, 0x4, 0x0, 0xfff})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

** 144 printk messages dropped ** [  673.861746] binder: 26337:26343 transaction failed 29189/-3, size 24-8 line 3137
[  673.869833] binder: 26342:26345 transaction failed 29189/-22, size 24-8 line 3014
[  673.941382] binder: 26351:26363 transaction failed 29189/-22, size 24-8 line 3014
[  673.941616] binder: 26351:26363 BC_INCREFS_DONE u0000000000000000 no match
[  673.943120] binder: 26349:26353 transaction failed 29189/-22, size 24-8 line 3014
[  673.944624] binder_alloc: 26357: binder_alloc_buf, no vma
[  673.944666] binder: 26357:26367 transaction failed 29189/-3, size 24-8 line 3137
[  673.966975] binder: 26356:26369 transaction failed 29189/-22, size 24-8 line 3014
[  674.048064] binder: 26371:26380 transaction failed 29189/-22, size 24-8 line 3014
[  674.087272] binder_alloc: 26384: binder_alloc_buf, no vma
[  674.087316] binder: 26384:26385 transaction failed 29189/-3, size 24-8 line 3137
[  674.096401] binder: 26381:26386 transaction failed 29189/-22, size 24-8 line 3014
[  674.108165] binder: 26383:26387 transaction failed 29189/-22, size 24-8 line 3014
[  674.108286] binder: 26383:26387 BC_INCREFS_DONE u0000000000000000 no match
[  674.170516] binder: 26389:26396 transaction failed 29189/-22, size 24-8 line 3014
[  674.178783] binder_alloc: 26393: binder_alloc_buf, no vma
[  674.178832] binder: 26393:26401 transaction failed 29189/-3, size 24-8 line 3137
[  674.190828] binder: 26397:26403 transaction failed 29189/-22, size 24-8 line 3014
[  674.191091] binder: 26397:26403 BC_INCREFS_DONE u0000000000000000 no match
[  674.253441] binder: 26414:26416 transaction failed 29189/-22, size 24-8 line 3014
[  674.262834] binder: 26408:26417 transaction failed 29189/-22, size 24-8 line 3014
[  674.306822] binder: 26418:26427 transaction failed 29189/-22, size 24-8 line 3014
[  674.308022] binder: 26418:26427 BC_INCREFS_DONE u0000000000000000 no match
[  674.311902] binder_alloc: 26421: binder_alloc_buf, no vma
[  674.311947] binder: 26421:26429 transaction failed 29189/-3, size 24-8 line 3137
[  674.362496] binder: 26430:26436 transaction failed 29189/-22, size 24-8 line 3014
[  674.395816] binder: 26433:26441 transaction failed 29189/-22, size 24-8 line 3014
[  674.416851] binder_alloc: 26443: binder_alloc_buf, no vma
[  674.416897] binder: 26443:26448 transaction failed 29189/-3, size 24-8 line 3137
[  674.459999] binder: 26459:26465 transaction failed 29189/-22, size 24-8 line 3014
[  674.478677] binder: 26446:26454 transaction failed 29189/-22, size 24-8 line 3014
[  674.479341] binder: 26451:26458 transaction failed 29189/-22, size 24-8 line 3014
[  674.479459] binder: 26451:26458 BC_INCREFS_DONE u0000000000000000 no match
[  674.548718] binder_alloc: 26472: binder_alloc_buf, no vma
[  674.548762] binder: 26472:26483 transaction failed 29189/-3, size 24-8 line 3137
[  674.561348] binder: 26475:26487 transaction failed 29189/-22, size 24-8 line 3014
[  674.561456] binder: 26475:26487 BC_INCREFS_DONE u0000000000000000 no match
[  674.591182] binder: 26474:26492 transaction failed 29189/-22, size 24-8 line 3014
[  674.602513] binder: 26477:26486 transaction failed 29189/-22, size 24-8 line 3014
[  674.611512] binder_alloc: 26494: binder_alloc_buf, no vma
[  674.611559] binder: 26494:26496 transaction failed 29189/-3, size 24-8 line 3137
[  674.673962] binder: 26500:26502 transaction failed 29189/-22, size 24-8 line 3014
[  674.684718] binder: 26510:26511 transaction failed 29189/-22, size 24-8 line 3014
[  674.714257] binder_alloc: 26512: binder_alloc_buf, no vma
[  674.714301] binder: 26512:26516 transaction failed 29189/-3, size 24-8 line 3137
[  674.726932] binder: 26503:26515 transaction failed 29189/-22, size 24-8 line 3014
[  674.727065] binder: 26503:26515 BC_INCREFS_DONE u0000000000000000 no match
[  674.757453] binder: 26523:26524 transaction failed 29189/-22, size 24-8 line 3014
[  674.818385] binder_alloc: 26533: binder_alloc_buf, no vma
[  674.818426] binder: 26533:26534 transaction failed 29189/-3, size 24-8 line 3137
[  674.867710] binder: 26532:26538 transaction failed 29189/-22, size 24-8 line 3014
[  674.876811] binder: 26544:26548 transaction failed 29189/-22, size 24-8 line 3014
[  674.876899] binder: 26544:26548 BC_INCREFS_DONE u0000000000000000 no match
[  674.898203] binder: 26550:26551 transaction failed 29189/-22, size 24-8 line 3014
[  674.953460] binder: 26556:26558 transaction failed 29189/-22, size 24-8 line 3014
[  674.964367] binder_alloc: 26552: binder_alloc_buf, no vma
[  674.964454] binder: 26552:26564 transaction failed 29189/-3, size 24-8 line 3137
[  674.984134] binder: 26563:26566 transaction failed 29189/-22, size 24-8 line 3014
[  674.984447] binder: 26563:26566 BC_INCREFS_DONE u0000000000000000 no match
[  675.024557] binder: 26568:26572 transaction failed 29189/-22, size 24-8 line 3014
[  675.036663] binder: 26574:26579 transaction failed 29189/-22, size 24-8 line 3014
[  675.100040] binder_alloc: 26588: binder_alloc_buf, no vma
[  675.100093] binder: 26588:26589 transaction failed 29189/-3, size 24-8 line 3137
[  675.112590] binder: 26582:26592 transaction failed 29189/-22, size 24-8 line 3014
[  675.112710] binder: 26582:26592 BC_INCREFS_DONE u0000000000000000 no match
[  675.141037] binder: 26598:26605 transaction failed 29189/-22, size 24-8 line 3014
[  675.146289] binder: 26594:26601 transaction failed 29189/-22, size 24-8 line 3014
[  675.181638] binder_alloc: 26609: binder_alloc_buf, no vma
[  675.181681] binder: 26609:26611 transaction failed 29189/-3, size 24-8 line 3137
[  675.190333] binder: 26608:26613 transaction failed 29189/-22, size 24-8 line 3014
[  675.190497] binder: 26608:26613 BC_INCREFS_DONE u0000000000000000 no match
[  675.249088] binder: 26617:26621 transaction failed 29189/-22, size 24-8 line 3014
[  675.249344] binder: 26616:26624 transaction failed 29189/-22, size 24-8 line 3014
[  675.249441] binder: 26617:26621 BC_INCREFS_DONE u0000000000000000 no match
[  675.253948] binder: 26620:26626 transaction failed 29189/-22, size 24-8 line 3014
[  675.263606] binder_alloc: 26623: binder_alloc_buf, no vma
[  675.263647] binder: 26623:26628 transaction failed 29189/-3, size 24-8 line 3137
[  675.338814] binder: 26639:26644 transaction failed 29189/-22, size 24-8 line 3014
[  675.353162] binder: 26638:26648 transaction failed 29189/-22, size 24-8 line 3014
[  675.353288] binder: 26638:26648 BC_INCREFS_DONE u0000000000000000 no match
[  675.357296] binder: 26643:26645 transaction failed 29189/-22, size 24-8 line 3014
[  675.378447] binder_alloc: 26646: binder_alloc_buf, no vma
[  675.378488] binder: 26646:26651 transaction failed 29189/-3, size 24-8 line 3137
[  675.444511] binder: 26654:26664 transaction failed 29189/-22, size 24-8 line 3014
[  675.444790] binder: 26662:26663 transaction failed 29189/-22, size 24-8 line 3014
[  675.445198] binder: 26654:26664 BC_INCREFS_DONE u0000000000000000 no match
[  675.460245] binder_alloc: 26661: binder_alloc_buf, no vma
[  675.460289] binder: 26661:26670 transaction failed 29189/-3, size 24-8 line 3137
[  675.529323] binder_alloc: 26676: binder_alloc_buf, no vma
[  675.529368] binder: 26676:26678 transaction failed 29189/-3, size 24-8 line 3137
[  675.535665] binder: 26677:26680 transaction failed 29189/-22, size 24-8 line 3014
[  675.551412] binder: 26667:26683 transaction failed 29189/-22, size 24-8 line 3014
[  675.601169] binder: 26687:26693 transaction failed 29189/-22, size 24-8 line 3014
[  675.601293] binder: 26687:26693 BC_INCREFS_DONE u0000000000000000 no match
[  675.615057] binder_alloc: 26690: binder_alloc_buf, no vma
[  675.615099] binder: 26690:26694 transaction failed 29189/-3, size 24-8 line 3137
[  675.683401] binder: 26698:26699 transaction failed 29189/-22, size 24-8 line 3014
[  675.713317] binder: 26712:26722 transaction failed 29189/-22, size 24-8 line 3014
[  675.713856] binder_alloc: 26715: binder_alloc_buf, no vma
[  675.713899] binder: 26715:26721 transaction failed 29189/-3, size 24-8 line 3137
[  675.728505] binder: 26711:26718 transaction failed 29189/-22, size 24-8 line 3014
[  675.729502] binder: 26711:26718 BC_INCREFS_DONE u0000000000000000 no match
[  675.793505] binder_alloc: 26738: binder_alloc_buf, no vma
[  675.793560] binder: 26738:26744 transaction failed 29189/-3, size 24-8 line 3137
[  675.794300] binder: 26730:26741 transaction failed 29189/-22, size 24-8 line 3014
[  675.803652] binder: 26727:26735 transaction failed 29189/-22, size 24-8 line 3014
[  675.839428] binder: 26742:26747 transaction failed 29189/-22, size 24-8 line 3014
[  675.841275] binder: 26742:26747 BC_INCREFS_DONE u0000000000000000 no match
[  675.898533] binder: 26751:26752 transaction failed 29189/-22, size 24-8 line 3014
[  675.926805] binder: 26758:26763 transaction failed 29189/-22, size 24-8 line 3014
[  675.960336] binder_alloc: 26762: binder_alloc_buf, no vma
[  675.960378] binder: 26762:26773 transaction failed 29189/-3, size 24-8 line 3137
[  675.985582] binder: 26768:26772 transaction failed 29189/-22, size 24-8 line 3014
[  675.986392] binder: 26757:26777 transaction failed 29189/-22, size 24-8 line 3014
[  675.986783] binder: 26757:26777 BC_INCREFS_DONE u0000000000000000 no match
[  676.024120] binder_alloc: 26783: binder_alloc_buf, no vma
[  676.024165] binder: 26783:26787 transaction failed 29189/-3, size 24-8 line 3137
[  676.061033] binder: 26775:26786 transaction failed 29189/-22, size 24-8 line 3014
[  676.061878] binder: 26785:26790 transaction failed 29189/-22, size 24-8 line 3014
[  676.089070] binder: 26792:26795 transaction failed 29189/-22, size 24-8 line 3014
[  676.089176] binder: 26792:26795 BC_INCREFS_DONE u0000000000000000 no match
[  676.138195] binder: 26796:26804 transaction failed 29189/-22, size 24-8 line 3014
[  676.155119] binder: 26801:26806 transaction failed 29189/-22, size 24-8 line 3014
[  676.159203] binder_alloc: 26800: binder_alloc_buf, no vma
[  676.159243] binder: 26800:26805 transaction failed 29189/-3, size 24-8 line 3137
[  676.193201] binder: 26803:26811 transaction failed 29189/-22, size 24-8 line 3014
[  676.193907] binder: 26803:26811 BC_INCREFS_DONE u0000000000000000 no match
[  676.251370] binder: 26815:26826 transaction failed 29189/-22, size 24-8 line 3014
[  676.253219] binder: 26817:26820 transaction failed 29189/-22, size 24-8 line 3014
[  676.256003] binder_alloc: 26821: binder_alloc_buf, no vma
[  676.256048] binder: 26821:26823 transaction failed 29189/-3, size 24-8 line 3137
[  676.324340] binder_alloc: 26833: binder_alloc_buf, no vma
[  676.324385] binder: 26833:26840 transaction failed 29189/-3, size 24-8 line 3137
[  676.341864] binder: 26835:26847 transaction failed 29189/-22, size 24-8 line 3014
[  676.341992] binder: 26835:26847 BC_INCREFS_DONE u0000000000000000 no match
[  676.342189] binder: 26837:26842 transaction failed 29189/-22, size 24-8 line 3014
[  676.382439] binder: 26838:26845 transaction failed 29189/-22, size 24-8 line 3014
[  676.429395] binder: 26851:26861 transaction failed 29189/-22, size 24-8 line 3014
[  676.431252] binder_alloc: 26856: binder_alloc_buf, no vma
[  676.431295] binder: 26856:26862 transaction failed 29189/-3, size 24-8 line 3137
[  676.467049] binder: 26871:26872 transaction failed 29189/-22, size 24-8 line 3014
[  676.475550] binder: 26860:26876 transaction failed 29189/-22, size 24-8 line 3014
[  676.475666] binder: 26860:26876 BC_INCREFS_DONE u0000000000000000 no match
[  676.528310] binder_alloc: 26875: binder_alloc_buf, no vma
[  676.528354] binder: 26875:26881 transaction failed 29189/-3, size 24-8 line 3137
[  676.553308] binder: 26879:26888 transaction failed 29189/-22, size 24-8 line 3014
[  676.553413] binder: 26879:26888 BC_INCREFS_DONE u0000000000000000 no match
[  676.590112] binder: 26886:26890 transaction failed 29189/-22, size 24-8 line 3014
[  676.628194] binder: 26891:26896 transaction failed 29189/-22, size 24-8 line 3014
[  676.644583] binder: 26899:26903 transaction failed 29189/-22, size 24-8 line 3014
[  676.644803] binder: 26899:26903 BC_INCREFS_DONE u0000000000000000 no match
[  676.671629] binder_alloc: 26892: binder_alloc_buf, no vma
[  676.671673] binder: 26892:26907 transaction failed 29189/-3, size 24-8 line 3137
[  676.711226] binder: 26909:26918 transaction failed 29189/-22, size 24-8 line 3014
[  676.720946] binder: 26906:26914 transaction failed 29189/-22, size 24-8 line 3014
[  676.731955] binder_alloc: 26916: binder_alloc_buf, no vma
[  676.732003] binder: 26916:26920 transaction failed 29189/-3, size 24-8 line 3137
[  676.786024] binder: 26921:26923 transaction failed 29189/-22, size 24-8 line 3014
[  676.786147] binder: 26921:26923 BC_INCREFS_DONE u0000000000000000 no match
[  676.802244] binder: 26929:26936 transaction failed 29189/-22, size 24-8 line 3014
[  676.861586] binder: 26948:26950 transaction failed 29189/-22, size 24-8 line 3014
[  676.870477] binder: 26935:26952 transaction failed 29189/-22, size 24-8 line 3014
[  676.876846] binder_alloc: 26945: binder_alloc_buf, no vma
[  676.876893] binder: 26945:26954 transaction failed 29189/-3, size 24-8 line 3137
[  676.912888] binder: 26946:26951 transaction failed 29189/-22, size 24-8 line 3014
[  676.913045] binder: 26946:26951 BC_INCREFS_DONE u0000000000000000 no match
[  676.954388] binder: 26960:26964 transaction failed 29189/-22, size 24-8 line 3014
[  676.966232] binder_alloc: 26959: binder_alloc_buf, no vma
[  676.966276] binder: 26959:26968 transaction failed 29189/-3, size 24-8 line 3137
[  677.029345] binder: 26967:26980 transaction failed 29189/-22, size 24-8 line 3014
[  677.038086] binder: 26976:26983 transaction failed 29189/-22, size 24-8 line 3014
[  677.038249] binder: 26976:26983 BC_INCREFS_DONE u0000000000000000 no match
[  677.091343] binder: 26974:26982 transaction failed 29189/-22, size 24-8 line 3014
[  677.123080] binder_alloc: 26993: binder_alloc_buf, no vma
[  677.123124] binder: 26993:27001 transaction failed 29189/-3, size 24-8 line 3137
[  677.159147] binder: 26994:27008 transaction failed 29189/-22, size 24-8 line 3014
[  677.159669] binder: 26994:27008 BC_INCREFS_DONE u0000000000000000 no match
[  677.168923] binder: 27002:27006 transaction failed 29189/-22, size 24-8 line 3014
[  677.218290] binder: 26988:27009 transaction failed 29189/-22, size 24-8 line 3014
[  677.245515] binder_alloc: 27012: binder_alloc_buf, no vma
[  677.245558] binder: 27012:27019 transaction failed 29189/-3, size 24-8 line 3137
[  677.275730] binder: 27021:27032 transaction failed 29189/-22, size 24-8 line 3014
[  677.275822] binder: 27021:27032 BC_INCREFS_DONE u0000000000000000 no match
[  677.316099] binder: 27017:27029 transaction failed 29189/-22, size 24-8 line 3014
[  677.331702] binder_alloc: 27037: binder_alloc_buf, no vma
[  677.331754] binder: 27037:27039 transaction failed 29189/-3, size 24-8 line 3137
[  677.373332] binder: 27041:27046 transaction failed 29189/-22, size 24-8 line 3014
[  677.391521] binder: 27048:27050 transaction failed 29189/-22, size 24-8 line 3014
[  677.392202] binder: 27048:27050 BC_INCREFS_DONE u0000000000000000 no match
[  677.443279] binder_alloc: 27053: binder_alloc_buf, no vma
[  677.443321] binder: 27053:27061 transaction failed 29189/-3, size 24-8 line 3137
[  677.459107] binder: 27059:27062 transaction failed 29189/-22, size 24-8 line 3014
[  677.463358] binder: 27059:27062 BC_INCREFS_DONE u0000000000000000 no match
[  677.469776] binder: 27064:27067 transaction failed 29189/-22, size 24-8 line 3014
[  677.481974] binder: 27063:27068 transaction failed 29189/-22, size 24-8 line 3014
[  677.583567] binder: 27072:27094 transaction failed 29189/-22, size 24-8 line 3014
[  677.583677] binder: 27072:27094 BC_INCREFS_DONE u0000000000000000 no match
[  677.587396] binder: 27082:27097 transaction failed 29189/-22, size 24-8 line 3014
[  677.588071] binder_alloc: 27084: binder_alloc_buf, no vma
[  677.588113] binder: 27084:27098 transaction failed 29189/-3, size 24-8 line 3137
[  677.634082] binder: 27091:27100 transaction failed 29189/-22, size 24-8 line 3014
[  677.650637] binder: 27107:27108 transaction failed 29189/-22, size 24-8 line 3014
[  677.650739] binder: 27107:27108 BC_INCREFS_DONE u0000000000000000 no match
[  677.672793] binder_alloc: 27103: binder_alloc_buf, no vma
[  677.672838] binder: 27103:27109 transaction failed 29189/-3, size 24-8 line 3137
[  677.683188] binder: 27111:27114 transaction failed 29189/-22, size 24-8 line 3014
[  677.723582] binder: 27113:27122 transaction failed 29189/-22, size 24-8 line 3014
[  677.739535] binder: 27117:27120 transaction failed 29189/-22, size 24-8 line 3014
[  677.747614] binder: 27117:27120 BC_INCREFS_DONE u0000000000000000 no match
[  677.792364] binder: 27138:27141 transaction failed 29189/-22, size 24-8 line 3014
[  677.799146] binder: 27131:27143 transaction failed 29189/-22, size 24-8 line 3014
[  677.803839] binder: 27136:27145 transaction failed 29189/-22, size 24-8 line 3014
[  677.803953] binder: 27136:27145 BC_INCREFS_DONE u0000000000000000 no match
[  677.828391] binder_alloc: 27121: binder_alloc_buf, no vma
[  677.828436] binder: 27121:27146 transaction failed 29189/-3, size 24-8 line 3137
[  677.872886] binder: 27150:27153 transaction failed 29189/-22, size 24-8 line 3014
[  677.873005] binder: 27150:27153 BC_INCREFS_DONE u0000000000000000 no match
[  677.884541] binder: 27152:27155 transaction failed 29189/-22, size 24-8 line 3014
[  677.891004] binder: 27147:27158 transaction failed 29189/-22, size 24-8 line 3014
[  677.962142] binder: 27167:27174 transaction failed 29189/-22, size 24-8 line 3014
[  677.976508] binder_alloc: 27165: binder_alloc_buf, no vma
[  677.976559] binder: 27165:27173 transaction failed 29189/-3, size 24-8 line 3137
[  677.992634] binder: 27175:27182 transaction failed 29189/-22, size 24-8 line 3014
[  677.993720] binder: 27175:27182 BC_INCREFS_DONE u0000000000000000 no match
[  678.020644] binder: 27170:27184 transaction failed 29189/-22, size 24-8 line 3014
[  678.054490] binder: 27188:27189 transaction failed 29189/-22, size 24-8 line 3014
[  678.081734] binder_alloc: 27192: binder_alloc_buf, no vma
[  678.081778] binder: 27192:27199 transaction failed 29189/-3, size 24-8 line 3137
[  678.090431] binder: 27197:27202 transaction failed 29189/-22, size 24-8 line 3014
[  678.090607] binder: 27197:27202 BC_INCREFS_DONE u0000000000000000 no match
[  678.106888] binder: 27198:27211 transaction failed 29189/-22, size 24-8 line 3014
[  678.159606] binder: 27222:27224 transaction failed 29189/-22, size 24-8 line 3014
[  678.165269] binder: 27220:27223 transaction failed 29189/-22, size 24-8 line 3014
[  678.165421] binder: 27220:27223 BC_INCREFS_DONE u0000000000000000 no match
[  678.191558] binder: 27207:27225 transaction failed 29189/-22, size 24-8 line 3014
[  678.243022] binder_alloc: 27229: binder_alloc_buf, no vma
[  678.243067] binder: 27229:27235 transaction failed 29189/-3, size 24-8 line 3137
[  678.248759] binder: 27232:27238 transaction failed 29189/-22, size 24-8 line 3014
[  678.259249] binder: 27246:27248 transaction failed 29189/-22, size 24-8 line 3014
[  678.308000] binder: 27256:27262 transaction failed 29189/-22, size 24-8 line 3014
[  678.310438] binder: 27237:27250 transaction failed 29189/-22, size 24-8 line 3014
[  678.310567] binder: 27237:27250 BC_INCREFS_DONE u0000000000000000 no match
[  678.312435] binder_alloc: 27265: binder_alloc_buf, no vma
[  678.312480] binder: 27265:27266 transaction failed 29189/-3, size 24-8 line 3137
[  678.390035] binder: 27267:27271 transaction failed 29189/-22, size 24-8 line 3014
[  678.408946] binder: 27277:27282 transaction failed 29189/-22, size 24-8 line 3014
[  678.412413] binder: 27275:27281 transaction failed 29189/-22, size 24-8 line 3014
[  678.412569] binder: 27275:27281 BC_INCREFS_DONE u0000000000000000 no match
[  678.492072] binder_alloc: 27288: binder_alloc_buf, no vma
[  678.492117] binder: 27288:27302 transaction failed 29189/-3, size 24-8 line 3137
[  678.496954] binder: 27293:27294 transaction failed 29189/-22, size 24-8 line 3014
[  678.548004] binder_alloc: 27308: binder_alloc_buf, no vma
[  678.548050] binder: 27308:27317 transaction failed 29189/-3, size 24-8 line 3137
[  678.551368] binder: 27305:27314 transaction failed 29189/-22, size 24-8 line 3014
[  678.562147] binder: 27305:27314 BC_INCREFS_DONE u0000000000000000 no match
[  678.585666] binder: 27298:27313 transaction failed 29189/-22, size 24-8 line 3014
[  678.614780] binder: 27319:27325 transaction failed 29189/-22, size 24-8 line 3014
[  678.632085] binder_alloc: 27324: binder_alloc_buf, no vma
[  678.632133] binder: 27324:27328 transaction failed 29189/-3, size 24-8 line 3137
[  678.651942] binder: 27327:27334 transaction failed 29189/-22, size 24-8 line 3014
[  678.652701] binder: 27327:27334 BC_INCREFS_DONE u0000000000000000 no match
[  678.733248] binder_alloc: 27341: binder_alloc_buf, no vma
[  678.733293] binder: 27341:27345 transaction failed 29189/-3, size 24-8 line 3137
[  678.738714] binder: 27342:27347 transaction failed 29189/-22, size 24-8 line 3014
[  678.745253] binder: 27344:27349 transaction failed 29189/-22, size 24-8 line 3014
[  678.770894] binder: 27356:27357 transaction failed 29189/-22, size 24-8 line 3014
[  678.771019] binder: 27356:27357 BC_INCREFS_DONE u0000000000000000 no match
[  678.821828] binder: 27362:27365 transaction failed 29189/-22, size 24-8 line 3014
[  678.826182] binder_alloc: 27360: binder_alloc_buf, no vma
[  678.826228] binder: 27360:27367 transaction failed 29189/-3, size 24-8 line 3137
[  678.866129] binder: 27374:27377 transaction failed 29189/-22, size 24-8 line 3014
[  678.868766] binder: 27376:27384 transaction failed 29189/-22, size 24-8 line 3014
[  678.868883] binder: 27376:27384 BC_INCREFS_DONE u0000000000000000 no match
[  678.895977] binder: 27382:27386 transaction failed 29189/-22, size 24-8 line 3014
[  678.926614] binder_alloc: 27390: binder_alloc_buf, no vma
[  678.926660] binder: 27390:27395 transaction failed 29189/-3, size 24-8 line 3137
[  678.941658] binder: 27394:27396 transaction failed 29189/-22, size 24-8 line 3014
[  678.941675] binder: 27391:27397 transaction failed 29189/-22, size 24-8 line 3014
[  678.941772] binder: 27391:27397 BC_INCREFS_DONE u0000000000000000 no match
[  679.008176] binder: 27403:27404 transaction failed 29189/-22, size 24-8 line 3014
[  679.013919] binder: 27415:27422 transaction failed 29189/-22, size 24-8 line 3014
[  679.014036] binder: 27415:27422 BC_INCREFS_DONE u0000000000000000 no match
[  679.016773] binder_alloc: 27405: binder_alloc_buf, no vma
[  679.016817] binder: 27405:27416 transaction failed 29189/-3, size 24-8 line 3137
[  679.091521] binder_alloc: 27428: binder_alloc_buf, no vma
[  679.091566] binder: 27428:27432 transaction failed 29189/-3, size 24-8 line 3137
[  679.103987] binder: 27426:27438 transaction failed 29189/-22, size 24-8 line 3014
[  679.104086] binder: 27426:27438 BC_INCREFS_DONE u0000000000000000 no match
[  679.131258] binder: 27427:27439 transaction failed 29189/-22, size 24-8 line 3014
[  679.166630] binder_alloc: 27442: binder_alloc_buf, no vma
[  679.166674] binder: 27442:27446 transaction failed 29189/-3, size 24-8 line 3137
[  679.179474] binder: 27447:27454 transaction failed 29189/-22, size 24-8 line 3014
[  679.181135] binder: 27447:27454 BC_INCREFS_DONE u0000000000000000 no match
[  679.182532] binder: 27449:27456 transaction failed 29189/-22, size 24-8 line 3014
[  679.210346] binder: 27431:27460 transaction failed 29189/-22, size 24-8 line 3014
[  679.279656] binder: 27467:27474 transaction failed 29189/-22, size 24-8 line 3014
[  679.299865] binder: 27477:27481 transaction failed 29189/-22, size 24-8 line 3014
[  679.308012] binder: 27479:27483 transaction failed 29189/-22, size 24-8 line 3014
[  679.308174] binder: 27479:27483 BC_INCREFS_DONE u0000000000000000 no match
[  679.319242] binder_alloc: 27485: binder_alloc_buf, no vma
[  679.319289] binder: 27485:27486 transaction failed 29189/-3, size 24-8 line 3137
[  679.336169] binder: 27487:27490 transaction failed 29189/-22, size 24-8 line 3014
[  679.373279] binder: 27493:27500 transaction failed 29189/-22, size 24-8 line 3014
[  679.407384] binder: 27496:27507 transaction failed 29189/-22, size 24-8 line 3014
[  679.407512] binder: 27496:27507 BC_INCREFS_DONE u0000000000000000 no match
[  679.425279] binder_alloc: 27498: binder_alloc_buf, no vma
[  679.425321] binder: 27498:27504 transaction failed 29189/-3, size 24-8 line 3137
[  679.460401] binder: 27509:27511 transaction failed 29189/-22, size 24-8 line 3014
[  679.477384] binder: 27513:27516 transaction failed 29189/-22, size 24-8 line 3014
[  679.477501] binder: 27513:27516 BC_INCREFS_DONE u0000000000000000 no match
[  679.494185] binder: 27514:27517 transaction failed 29189/-22, size 24-8 line 3014
[  679.555467] binder: 27531:27534 transaction failed 29189/-22, size 24-8 line 3014
[  679.555832] binder: 27523:27539 transaction failed 29189/-22, size 24-8 line 3014
[  679.582708] binder_alloc: 27532: binder_alloc_buf, no vma
[  679.582753] binder: 27532:27540 transaction failed 29189/-3, size 24-8 line 3137
[  679.618443] binder: 27538:27543 transaction failed 29189/-22, size 24-8 line 3014
[  679.619455] binder: 27538:27543 BC_INCREFS_DONE u0000000000000000 no match
[  679.687581] binder: 27552:27554 transaction failed 29189/-22, size 24-8 line 3014
[  679.720691] binder: 27553:27570 transaction failed 29189/-22, size 24-8 line 3014
[  679.730223] binder_alloc: 27565: binder_alloc_buf, no vma
[  679.730270] binder: 27565:27567 transaction failed 29189/-3, size 24-8 line 3137
[  679.744941] binder: 27563:27569 transaction failed 29189/-22, size 24-8 line 3014
[  679.745211] binder: 27563:27569 BC_INCREFS_DONE u0000000000000000 no match
[  679.813015] binder: 27572:27579 transaction failed 29189/-22, size 24-8 line 3014
[  679.829883] binder: 27582:27585 transaction failed 29189/-22, size 24-8 line 3014
[  679.830009] binder: 27582:27585 BC_INCREFS_DONE u0000000000000000 no match
[  679.872755] binder_alloc: 27578: binder_alloc_buf, no vma
[  679.872797] binder: 27578:27584 transaction failed 29189/-3, size 24-8 line 3137
[  679.876271] binder: 27587:27596 transaction failed 29189/-22, size 24-8 line 3014
[  679.908262] binder: 27601:27602 transaction failed 29189/-22, size 24-8 line 3014
[  679.944511] binder: 27600:27609 transaction failed 29189/-22, size 24-8 line 3014
[  679.944633] binder: 27600:27609 BC_INCREFS_DONE u0000000000000000 no match
[  679.973140] binder_alloc: 27611: binder_alloc_buf, no vma
[  679.973185] binder: 27611:27618 transaction failed 29189/-3, size 24-8 line 3137
[  679.977939] binder_alloc: 27611: binder_alloc_buf, no vma
[  679.977983] binder: 27614:27624 transaction failed 29189/-3, size 24-8 line 3137
[  680.064897] binder: 27633:27637 transaction failed 29189/-22, size 24-8 line 3014
[  680.072405] binder: 27630:27640 transaction failed 29189/-22, size 24-8 line 3014
[  680.072571] binder: 27630:27640 BC_INCREFS_DONE u0000000000000000 no match
[  680.108748] binder: 27642:27644 transaction failed 29189/-22, size 24-8 line 3014
[  680.132155] binder_alloc: 27643: binder_alloc_buf, no vma
[  680.132198] binder: 27643:27648 transaction failed 29189/-3, size 24-8 line 3137
[  680.162727] binder: 27658:27665 transaction failed 29189/-22, size 24-8 line 3014
[  680.168023] binder_alloc: 27661: binder_alloc_buf, no vma
[  680.168067] binder: 27661:27666 transaction failed 29189/-3, size 24-8 line 3137
[  680.201364] binder: 27669:27670 transaction failed 29189/-22, size 24-8 line 3014
[  680.226733] binder: 27652:27672 transaction failed 29189/-22, size 24-8 line 3014
[  680.226859] binder: 27652:27672 BC_INCREFS_DONE u0000000000000000 no match
[  680.270050] binder_alloc: 27673: binder_alloc_buf, no vma
[  680.270093] binder: 27673:27675 transaction failed 29189/-3, size 24-8 line 3137
[  680.297267] binder: 27681:27684 transaction failed 29189/-22, size 24-8 line 3014
[  680.318473] binder: 27677:27693 transaction failed 29189/-22, size 24-8 line 3014
[  680.318823] binder: 27677:27693 BC_INCREFS_DONE u0000000000000000 no match
[  680.371008] binder_alloc: 27699: binder_alloc_buf, no vma
[  680.371055] binder: 27699:27704 transaction failed 29189/-3, size 24-8 line 3137
[  680.383621] binder: 27703:27709 transaction failed 29189/-22, size 24-8 line 3014
[  680.384267] binder: 27700:27708 transaction failed 29189/-22, size 24-8 line 3014
[  680.386709] binder: 27700:27708 BC_INCREFS_DONE u0000000000000000 no match
[  680.417235] binder: 27678:27711 transaction failed 29189/-22, size 24-8 line 3014
[  680.459621] binder_alloc: 27714: binder_alloc_buf, no vma
[  680.459669] binder: 27714:27721 transaction failed 29189/-3, size 24-8 line 3137
[  680.486808] binder: 27727:27732 transaction failed 29189/-22, size 24-8 line 3014
[  680.487795] binder: 27727:27732 BC_INCREFS_DONE u0000000000000000 no match
[  680.534111] binder: 27730:27735 transaction failed 29189/-22, size 24-8 line 3014
[  680.554676] binder: 27734:27737 transaction failed 29189/-22, size 24-8 line 3014
[  680.576145] binder_alloc: 27739: binder_alloc_buf, no vma
[  680.576190] binder: 27739:27742 transaction failed 29189/-3, size 24-8 line 3137
[  680.604298] binder: 27738:27740 transaction failed 29189/-22, size 24-8 line 3014
[  680.604447] binder: 27738:27740 BC_INCREFS_DONE u0000000000000000 no match
[  680.647779] binder: 27756:27757 transaction failed 29189/-22, size 24-8 line 3014
[  680.678843] binder: 27751:27758 transaction failed 29189/-22, size 24-8 line 3014
[  680.717869] binder_alloc: 27762: binder_alloc_buf, no vma
[  680.717919] binder: 27762:27764 transaction failed 29189/-3, size 24-8 line 3137
[  680.772420] binder: 27768:27776 transaction failed 29189/-22, size 24-8 line 3014
[  680.775237] binder: 27772:27778 transaction failed 29189/-22, size 24-8 line 3014
[  680.781001] binder_alloc: 27779: binder_alloc_buf, no vma
[  680.781045] binder: 27779:27781 transaction failed 29189/-3, size 24-8 line 3137
[  680.812924] binder: 27775:27786 transaction failed 29189/-22, size 24-8 line 3014
[  680.813042] binder: 27775:27786 BC_INCREFS_DONE u0000000000000000 no match
[  680.834710] binder: 27788:27789 transaction failed 29189/-22, size 24-8 line 3014
[  680.852366] binder: 27791:27793 transaction failed 29189/-22, size 24-8 line 3014
[  680.890633] binder_alloc: 27796: binder_alloc_buf, no vma
[  680.890676] binder: 27796:27801 transaction failed 29189/-3, size 24-8 line 3137
[  680.922433] binder: 27800:27804 transaction failed 29189/-22, size 24-8 line 3014
[  680.922551] binder: 27800:27804 BC_INCREFS_DONE u0000000000000000 no match
[  680.951107] binder_alloc: 27807: binder_alloc_buf, no vma
[  680.951152] binder: 27807:27809 transaction failed 29189/-3, size 24-8 line 3137
[  680.981423] binder: 27818:27822 transaction failed 29189/-22, size 24-8 line 3014
[  680.983946] binder: 27811:27815 transaction failed 29189/-22, size 24-8 line 3014
[  681.023097] binder: 27824:27836 transaction failed 29189/-22, size 24-8 line 3014
[  681.023213] binder: 27824:27836 BC_INCREFS_DONE u0000000000000000 no match
[  681.024745] binder_alloc: 27826: binder_alloc_buf, no vma
[  681.024931] binder: 27826:27830 transaction failed 29189/-3, size 24-8 line 3137
[  681.046918] binder: 27827:27837 transaction failed 29189/-22, size 24-8 line 3014
[  681.087721] binder: 27845:27850 transaction failed 29189/-22, size 24-8 line 3014
[  681.138090] binder: 27852:27855 transaction failed 29189/-22, size 24-8 line 3014
[  681.162570] binder: 27857:27858 transaction failed 29189/-22, size 24-8 line 3014
[  681.162702] binder: 27857:27858 BC_INCREFS_DONE u0000000000000000 no match
[  681.167062] binder_alloc: 27860: binder_alloc_buf, no vma
[  681.167116] binder: 27860:27864 transaction failed 29189/-3, size 24-8 line 3137
[  681.187012] binder: 27863:27871 transaction failed 29189/-22, size 24-8 line 3014
[  681.191219] binder: 27872:27873 transaction failed 29189/-22, size 24-8 line 3014
[  681.254674] binder: 27883:27885 transaction failed 29189/-22, size 24-8 line 3014
[  681.254786] binder: 27883:27885 BC_INCREFS_DONE u0000000000000000 no match
[  681.268441] binder_alloc: 27884: binder_alloc_buf, no vma
[  681.268482] binder: 27884:27890 transaction failed 29189/-3, size 24-8 line 3137
[  681.286434] binder: 27891:27895 transaction failed 29189/-22, size 24-8 line 3014
[  681.294603] binder: 27889:27892 transaction failed 29189/-22, size 24-8 line 3014
[  681.354420] binder: 27903:27906 transaction failed 29189/-22, size 24-8 line 3014
[  681.355057] binder: 27903:27906 BC_INCREFS_DONE u0000000000000000 no match
[  681.369405] binder_alloc: 27902: binder_alloc_buf, no vma
[  681.369459] binder: 27902:27912 transaction failed 29189/-3, size 24-8 line 3137
[  681.423337] binder: 27910:27916 transaction failed 29189/-22, size 24-8 line 3014
[  681.427471] binder: 27915:27918 transaction failed 29189/-22, size 24-8 line 3014
[  681.444801] binder: 27917:27927 transaction failed 29189/-22, size 24-8 line 3014
[  681.444958] binder: 27917:27927 BC_INCREFS_DONE u0000000000000000 no match
[  681.460487] binder_alloc: 27920: binder_alloc_buf, no vma
[  681.460535] binder: 27920:27929 transaction failed 29189/-3, size 24-8 line 3137
[  681.494396] binder: 27930:27931 transaction failed 29189/-22, size 24-8 line 3014
[  681.551406] binder: 27936:27940 transaction failed 29189/-22, size 24-8 line 3014
[  681.551515] binder: 27936:27940 BC_INCREFS_DONE u0000000000000000 no match
[  681.565605] binder: 27937:27950 transaction failed 29189/-22, size 24-8 line 3014
[  681.588482] binder: 27945:27955 transaction failed 29189/-22, size 24-8 line 3014
[  681.590474] binder_alloc: 27953: binder_alloc_buf, no vma
[  681.590521] binder: 27953:27957 transaction failed 29189/-3, size 24-8 line 3137
[  681.644687] binder: 27959:27961 transaction failed 29189/-22, size 24-8 line 3014
[  681.644802] binder: 27959:27961 BC_INCREFS_DONE u0000000000000000 no match
[  681.664733] binder_alloc: 27970: binder_alloc_buf, no vma
[  681.664778] binder: 27970:27972 transaction failed 29189/-3, size 24-8 line 3137
[  681.674230] binder: 27969:27971 transaction failed 29189/-22, size 24-8 line 3014
[  681.679177] binder: 27966:27976 transaction failed 29189/-22, size 24-8 line 3014
[  681.723077] binder: 27978:27981 transaction failed 29189/-22, size 24-8 line 3014
[  681.723189] binder: 27978:27981 BC_INCREFS_DONE u0000000000000000 no match
[  681.737595] binder_alloc: 27980: binder_alloc_buf, no vma
[  681.737639] binder: 27980:27983 transaction failed 29189/-3, size 24-8 line 3137
[  681.761471] binder: 27987:27989 transaction failed 29189/-22, size 24-8 line 3014
[  681.780036] binder: 27988:27992 transaction failed 29189/-22, size 24-8 line 3014
[  681.844953] binder: 28003:28006 transaction failed 29189/-22, size 24-8 line 3014
[  681.845979] binder: 27996:28010 transaction failed 29189/-22, size 24-8 line 3014
[  681.846105] binder: 27996:28010 BC_INCREFS_DONE u0000000000000000 no match
[  681.850643] binder: 28004:28008 transaction failed 29189/-22, size 24-8 line 3014
[  681.935377] binder_alloc: 28009: binder_alloc_buf, no vma
[  681.935422] binder: 28009:28028 transaction failed 29189/-3, size 24-8 line 3137
[  681.942666] binder: 28023:28027 transaction failed 29189/-22, size 24-8 line 3014
[  681.942779] binder: 28023:28027 BC_INCREFS_DONE u0000000000000000 no match
[  681.988981] binder: 28029:28030 transaction failed 29189/-22, size 24-8 line 3014
[  682.028390] binder: 28017:28041 transaction failed 29189/-22, size 24-8 line 3014
[  682.082803] binder: 28051:28055 transaction failed 29189/-22, size 24-8 line 3014
[  682.083687] binder_alloc: 28040: binder_alloc_buf, no vma
[  682.083731] binder: 28040:28050 transaction failed 29189/-3, size 24-8 line 3137
[  682.107273] binder: 28045:28060 transaction failed 29189/-22, size 24-8 line 3014
[  682.107883] binder: 28045:28060 BC_INCREFS_DONE u0000000000000000 no match
[  682.141686] binder: 28058:28066 transaction failed 29189/-22, size 24-8 line 3014
[  682.193793] binder_alloc: 28074: binder_alloc_buf, no vma
[  682.193838] binder: 28074:28080 transaction failed 29189/-3, size 24-8 line 3137
[  682.197709] binder: 28075:28082 transaction failed 29189/-22, size 24-8 line 3014
[  682.211672] binder: 28076:28083 transaction failed 29189/-22, size 24-8 line 3014
[  682.225614] binder: 28079:28085 transaction failed 29189/-22, size 24-8 line 3014
[  682.225738] binder: 28079:28085 BC_INCREFS_DONE u0000000000000000 no match
[  682.300496] binder: 28097:28104 transaction failed 29189/-22, size 24-8 line 3014
[  682.302597] binder_alloc: 28095: binder_alloc_buf, no vma
[  682.302644] binder: 28095:28103 transaction failed 29189/-3, size 24-8 line 3137
[  682.340156] binder: 28093:28111 transaction failed 29189/-22, size 24-8 line 3014
[  682.340288] binder: 28093:28111 BC_INCREFS_DONE u0000000000000000 no match
[  682.353719] binder: 28108:28118 transaction failed 29189/-22, size 24-8 line 3014
[  682.394709] binder_alloc: 28116: binder_alloc_buf, no vma
[  682.394754] binder: 28116:28127 transaction failed 29189/-3, size 24-8 line 3137
[  682.430492] binder: 28128:28135 transaction failed 29189/-22, size 24-8 line 3014
[  682.451145] binder: 28132:28137 transaction failed 29189/-22, size 24-8 line 3014
[  682.477038] binder: 28138:28146 transaction failed 29189/-22, size 24-8 line 3014
[  682.477180] binder: 28138:28146 BC_INCREFS_DONE u0000000000000000 no match
[  682.539118] binder_alloc: 28149: binder_alloc_buf, no vma
[  682.539161] binder: 28149:28156 transaction failed 29189/-3, size 24-8 line 3137
[  682.548910] binder: 28153:28155 transaction failed 29189/-22, size 24-8 line 3014
[  682.576300] binder: 28161:28170 transaction failed 29189/-22, size 24-8 line 3014
[  682.615949] binder: 28163:28168 transaction failed 29189/-22, size 24-8 line 3014
[  682.616075] binder: 28163:28168 BC_INCREFS_DONE u0000000000000000 no match
[  682.623195] binder: 28173:28174 transaction failed 29189/-22, size 24-8 line 3014
[  682.669166] binder: 28176:28182 transaction failed 29189/-22, size 24-8 line 3014
[  682.699604] binder_alloc: 28180: binder_alloc_buf, no vma
[  682.699647] binder: 28180:28187 transaction failed 29189/-3, size 24-8 line 3137
[  682.704866] binder: 28185:28189 transaction failed 29189/-22, size 24-8 line 3014
[  682.775017] binder: 28196:28205 transaction failed 29189/-22, size 24-8 line 3014
[  682.782566] binder: 28203:28207 transaction failed 29189/-22, size 24-8 line 3014
[  682.782717] binder: 28203:28207 BC_INCREFS_DONE u0000000000000000 no match
[  682.790967] binder: 28194:28211 transaction failed 29189/-22, size 24-8 line 3014
[  682.849542] binder_alloc: 28202: binder_alloc_buf, no vma
[  682.849597] binder: 28202:28214 transaction failed 29189/-3, size 24-8 line 3137
[  682.885192] binder: 28225:28226 transaction failed 29189/-22, size 24-8 line 3014
[  682.886006] binder: 28219:28220 transaction failed 29189/-22, size 24-8 line 3014
[  682.886136] binder: 28219:28220 BC_INCREFS_DONE u0000000000000000 no match
[  682.911693] binder: 28227:28230 transaction failed 29189/-22, size 24-8 line 3014
[  682.969162] binder: 28239:28248 transaction failed 29189/-22, size 24-8 line 3014
[  682.979668] binder: 28243:28247 transaction failed 29189/-22, size 24-8 line 3014
[  683.008001] binder: 28245:28253 transaction failed 29189/-22, size 24-8 line 3014
[  683.008454] binder: 28245:28253 BC_INCREFS_DONE u0000000000000000 no match
[  683.010169] binder_alloc: 28256: binder_alloc_buf, no vma
[  683.010213] binder: 28256:28258 transaction failed 29189/-3, size 24-8 line 3137
[  683.059553] binder: 28261:28264 transaction failed 29189/-22, size 24-8 line 3014
[  683.079894] binder: 28260:28268 transaction failed 29189/-22, size 24-8 line 3014
[  683.082518] binder: 28262:28269 transaction failed 29189/-22, size 24-8 line 3014
[  683.082647] binder: 28262:28269 BC_INCREFS_DONE u0000000000000000 no match
[  683.092657] binder_alloc: 28265: binder_alloc_buf, no vma
[  683.092703] binder: 28265:28270 transaction failed 29189/-3, size 24-8 line 3137
[  683.156052] binder: 28279:28287 transaction failed 29189/-22, size 24-8 line 3014
[  683.224281] binder: 28289:28292 transaction failed 29189/-22, size 24-8 line 3014
[  683.235068] binder_alloc: 28294: binder_alloc_buf, no vma
[  683.235119] binder: 28294:28300 transaction failed 29189/-3, size 24-8 line 3137
[  683.235621] binder_alloc: 28294: binder_alloc_buf, no vma
[  683.235662] binder: 28293:28298 transaction failed 29189/-3, size 24-8 line 3137
[  683.255262] binder: 28296:28302 transaction failed 29189/-22, size 24-8 line 3014
[  683.255395] binder: 28296:28302 BC_INCREFS_DONE u0000000000000000 no match
[  683.352737] binder: 28316:28321 transaction failed 29189/-22, size 24-8 line 3014
[  683.365692] binder: 28308:28326 transaction failed 29189/-22, size 24-8 line 3014
[  683.390803] binder_alloc: 28325: binder_alloc_buf, no vma
[  683.390849] binder: 28325:28331 transaction failed 29189/-3, size 24-8 line 3137
[  683.438548] binder: 28318:28335 transaction failed 29189/-22, size 24-8 line 3014
[  683.438668] binder: 28318:28335 BC_INCREFS_DONE u0000000000000000 no match
[  683.472791] binder: 28336:28341 transaction failed 29189/-22, size 24-8 line 3014
[  683.494945] binder_alloc: 28340: binder_alloc_buf, no vma
[  683.494983] binder: 28340:28342 transaction failed 29189/-3, size 24-8 line 3137
[  683.549333] binder: 28357:28360 transaction failed 29189/-22, size 24-8 line 3014
[  683.559592] binder: 28354:28364 transaction failed 29189/-22, size 24-8 line 3014
[  683.572638] binder: 28350:28365 transaction failed 29189/-22, size 24-8 line 3014
[  683.572806] binder: 28350:28365 BC_INCREFS_DONE u0000000000000000 no match
[  683.595070] binder_alloc: 28361: binder_alloc_buf, no vma
[  683.595114] binder: 28361:28370 transaction failed 29189/-3, size 24-8 line 3137
[  683.655933] binder: 28374:28379 transaction failed 29189/-22, size 24-8 line 3014
[  683.656068] binder: 28374:28379 BC_INCREFS_DONE u0000000000000000 no match
[  683.728878] binder: 28380:28388 transaction failed 29189/-22, size 24-8 line 3014
[  683.732352] binder_alloc: 28385: binder_alloc_buf, no vma
[  683.732399] binder: 28385:28392 transaction failed 29189/-3, size 24-8 line 3137
[  683.765982] binder: 28389:28399 transaction failed 29189/-22, size 24-8 line 3014
[  683.778726] binder: 28401:28408 transaction failed 29189/-22, size 24-8 line 3014
[  683.778847] binder: 28401:28408 BC_INCREFS_DONE u0000000000000000 no match
[  683.789366] binder: 28402:28412 transaction failed 29189/-22, size 24-8 line 3014
[  683.832366] binder: 28417:28420 transaction failed 29189/-22, size 24-8 line 3014
[  683.832480] binder: 28417:28420 BC_INCREFS_DONE u0000000000000000 no match
[  683.851772] binder: 28423:28434 transaction failed 29189/-22, size 24-8 line 3014
[  683.863160] binder_alloc: 28415: binder_alloc_buf, no vma
[  683.863205] binder: 28415:28430 transaction failed 29189/-3, size 24-8 line 3137
[  683.866264] binder: 28419:28429 transaction failed 29189/-22, size 24-8 line 3014
[  683.923767] binder_alloc: 28439: binder_alloc_buf, no vma
[  683.923813] binder: 28439:28443 transaction failed 29189/-3, size 24-8 line 3137
[  683.945218] binder: 28438:28444 transaction failed 29189/-22, size 24-8 line 3014
[  683.945397] binder: 28438:28444 BC_INCREFS_DONE u0000000000000000 no match
[  683.969338] binder: 28440:28450 transaction failed 29189/-22, size 24-8 line 3014
[  684.008454] binder: 28453:28455 transaction failed 29189/-22, size 24-8 line 3014
[  684.041275] binder: 28459:28460 transaction failed 29189/-22, size 24-8 line 3014
[  684.041380] binder: 28459:28460 BC_INCREFS_DONE u0000000000000000 no match
[  684.052061] binder_alloc: 28461: binder_alloc_buf, no vma
[  684.052117] binder: 28461:28465 transaction failed 29189/-3, size 24-8 line 3137
[  684.052346] binder_alloc: 28461: binder_alloc_buf, no vma
[  684.052388] binder: 28458:28463 transaction failed 29189/-3, size 24-8 line 3137
[  684.135813] binder: 28467:28472 transaction failed 29189/-22, size 24-8 line 3014
[  684.148638] binder: 28473:28487 transaction failed 29189/-22, size 24-8 line 3014
[  684.148759] binder: 28473:28487 BC_INCREFS_DONE u0000000000000000 no match
[  684.192703] binder: 28477:28493 transaction failed 29189/-22, size 24-8 line 3014
[  684.210805] binder_alloc: 28483: binder_alloc_buf, no vma
[  684.210855] binder: 28483:28495 transaction failed 29189/-3, size 24-8 line 3137
[  684.235879] binder: 28492:28498 transaction failed 29189/-22, size 24-8 line 3014
[  684.260129] binder_alloc: 28510: binder_alloc_buf, no vma
[  684.260174] binder: 28510:28514 transaction failed 29189/-3, size 24-8 line 3137
[  684.282048] binder: 28502:28512 transaction failed 29189/-22, size 24-8 line 3014
[  684.311213] binder: 28501:28524 transaction failed 29189/-22, size 24-8 line 3014
[  684.311304] binder: 28501:28524 BC_INCREFS_DONE u0000000000000000 no match
[  684.324721] binder_alloc: 28526: binder_alloc_buf, no vma
[  684.324765] binder: 28526:28527 transaction failed 29189/-3, size 24-8 line 3137
[  684.354305] binder: 28518:28519 transaction failed 29189/-22, size 24-8 line 3014
[  684.366585] binder: 28529:28530 transaction failed 29189/-22, size 24-8 line 3014
[  684.430417] binder: 28547:28550 transaction failed 29189/-22, size 24-8 line 3014
[  684.456256] binder: 28539:28552 transaction failed 29189/-22, size 24-8 line 3014
[  684.456383] binder: 28539:28552 BC_INCREFS_DONE u0000000000000000 no match
[  684.459838] binder_alloc: 28542: binder_alloc_buf, no vma
[  684.459881] binder: 28542:28548 transaction failed 29189/-3, size 24-8 line 3137
[  684.472120] binder: 28545:28546 transaction failed 29189/-22, size 24-8 line 3014
[  684.511290] binder: 28556:28557 transaction failed 29189/-22, size 24-8 line 3014
[  684.558867] binder: 28562:28564 transaction failed 29189/-22, size 24-8 line 3014
[  684.581719] binder_alloc: 28570: binder_alloc_buf, no vma
[  684.581766] binder: 28570:28576 transaction failed 29189/-3, size 24-8 line 3137
[  684.591569] binder: 28571:28577 transaction failed 29189/-22, size 24-8 line 3014
[  684.594822] binder: 28566:28572 transaction failed 29189/-22, size 24-8 line 3014
[  684.594966] binder: 28566:28572 BC_INCREFS_DONE u0000000000000000 no match
[  684.633023] binder: 28580:28581 transaction failed 29189/-22, size 24-8 line 3014
[  684.682286] binder_alloc: 28586: binder_alloc_buf, no vma
[  684.682359] binder: 28586:28599 transaction failed 29189/-3, size 24-8 line 3137
[  684.694116] binder: 28600:28602 transaction failed 29189/-22, size 24-8 line 3014
[  684.694233] binder: 28600:28602 BC_INCREFS_DONE u0000000000000000 no match
[  684.705959] binder: 28592:28604 transaction failed 29189/-22, size 24-8 line 3014
[  684.710870] binder: 28596:28605 transaction failed 29189/-22, size 24-8 line 3014
[  684.784860] binder: 28614:28621 transaction failed 29189/-22, size 24-8 line 3014
[  684.807285] binder_alloc: 28616: binder_alloc_buf, no vma
[  684.807329] binder: 28616:28624 transaction failed 29189/-3, size 24-8 line 3137
[  684.836340] binder: 28619:28626 transaction failed 29189/-22, size 24-8 line 3014
[  684.836530] binder: 28619:28626 BC_INCREFS_DONE u0000000000000000 no match
[  684.879227] binder: 28638:28646 transaction failed 29189/-22, size 24-8 line 3014
[  684.879351] binder: 28638:28646 BC_INCREFS_DONE u0000000000000000 no match
[  684.881111] binder: 28618:28634 transaction failed 29189/-22, size 24-8 line 3014
[  684.896266] binder: 28627:28631 transaction failed 29189/-22, size 24-8 line 3014
[  684.916285] binder_alloc: 28637: binder_alloc_buf, no vma
[  684.916330] binder: 28637:28645 transaction failed 29189/-3, size 24-8 line 3137
[  684.970548] binder: 28657:28663 transaction failed 29189/-22, size 24-8 line 3014
[  684.970669] binder: 28657:28663 BC_INCREFS_DONE u0000000000000000 no match
[  684.974490] binder: 28654:28659 transaction failed 29189/-22, size 24-8 line 3014
[  684.993058] binder_alloc: 28664: binder_alloc_buf, no vma
[  684.993099] binder: 28664:28665 transaction failed 29189/-3, size 24-8 line 3137
[  685.012780] binder: 28658:28661 transaction failed 29189/-22, size 24-8 line 3014
[  685.074757] binder: 28670:28682 transaction failed 29189/-22, size 24-8 line 3014
[  685.074874] binder: 28670:28682 BC_INCREFS_DONE u0000000000000000 no match
[  685.088326] binder_alloc: 28680: binder_alloc_buf, no vma
[  685.088563] binder: 28680:28687 transaction failed 29189/-3, size 24-8 line 3137
[  685.115575] binder: 28691:28695 transaction failed 29189/-22, size 24-8 line 3014
[  685.127545] binder: 28689:28696 transaction failed 29189/-22, size 24-8 line 3014
[  685.148690] binder: 28698:28703 transaction failed 29189/-22, size 24-8 line 3014
[  685.148809] binder: 28698:28703 BC_INCREFS_DONE u0000000000000000 no match
[  685.184153] binder: 28706:28714 transaction failed 29189/-22, size 24-8 line 3014
[  685.209015] binder: 28713:28722 transaction failed 29189/-22, size 24-8 line 3014
[  685.219558] binder_alloc: 28701: binder_alloc_buf, no vma
[  685.219610] binder: 28701:28708 transaction failed 29189/-3, size 24-8 line 3137
[  685.232665] binder: 28718:28725 transaction failed 29189/-22, size 24-8 line 3014
[  685.233216] binder: 28718:28725 BC_INCREFS_DONE u0000000000000000 no match
[  685.280186] binder: 28730:28735 transaction failed 29189/-22, size 24-8 line 3014
[  685.289904] binder: 28736:28738 transaction failed 29189/-22, size 24-8 line 3014
[  685.290008] binder: 28736:28738 BC_INCREFS_DONE u0000000000000000 no match
[  685.310513] binder: 28731:28741 transaction failed 29189/-22, size 24-8 line 3014
[  685.351177] binder_alloc: 28733: binder_alloc_buf, no vma
[  685.351226] binder: 28733:28746 transaction failed 29189/-3, size 24-8 line 3137
[  685.363526] binder: 28745:28747 transaction failed 29189/-22, size 24-8 line 3014
[  685.383541] binder: 28754:28758 transaction failed 29189/-22, size 24-8 line 3014
[  685.395464] binder: 28749:28755 transaction failed 29189/-22, size 24-8 line 3014
[  685.395639] binder: 28749:28755 BC_INCREFS_DONE u0000000000000000 no match
[  685.449073] binder: 28770:28772 transaction failed 29189/-22, size 24-8 line 3014
[  685.449207] binder: 28770:28772 BC_INCREFS_DONE u0000000000000000 no match
[  685.480090] binder: 28777:28778 transaction failed 29189/-22, size 24-8 line 3014
[  685.508060] binder: 28776:28779 transaction failed 29189/-22, size 24-8 line 3014
[  685.554493] binder: 28794:28800 transaction failed 29189/-22, size 24-8 line 3014
[  685.555667] binder: 28792:28798 transaction failed 29189/-22, size 24-8 line 3014
[  685.556343] binder: 28792:28798 BC_INCREFS_DONE u0000000000000000 no match
[  685.566958] binder_alloc: 28773: binder_alloc_buf, no vma
[  685.567022] binder: 28773:28783 transaction failed 29189/-3, size 24-8 line 3137
[  685.567802] binder: 28791:28802 transaction failed 29189/-22, size 24-8 line 3014
[  685.811444] binder: 28810:28817 transaction failed 29189/-22, size 24-8 line 3014
[  685.811551] binder: 28810:28817 BC_INCREFS_DONE u0000000000000000 no match
[  685.821591] binder_alloc: 28816: binder_alloc_buf, no vma
[  685.821636] binder: 28816:28821 transaction failed 29189/-3, size 24-8 line 3137
[  685.885331] binder: 28822:28824 transaction failed 29189/-22, size 24-8 line 3014
[  685.970073] binder_alloc: 28830: binder_alloc_buf, no vma
[  685.970127] binder: 28830:28836 transaction failed 29189/-3, size 24-8 line 3137
[  685.972542] binder: 28829:28838 transaction failed 29189/-22, size 24-8 line 3014
[  685.972645] binder: 28829:28838 BC_INCREFS_DONE u0000000000000000 no match
[  686.036963] binder: 28842:28848 transaction failed 29189/-22, size 24-8 line 3014
[  686.088201] binder_alloc: 28852: binder_alloc_buf, no vma
[  686.088246] binder: 28852:28855 transaction failed 29189/-3, size 24-8 line 3137
[  686.093029] binder: 28854:28858 transaction failed 29189/-22, size 24-8 line 3014
[  686.093292] binder: 28854:28858 BC_INCREFS_DONE u0000000000000000 no match
[  686.098139] binder: 28856:28861 transaction failed 29189/-22, size 24-8 line 3014
[  686.150077] binder: 28866:28870 transaction failed 29189/-22, size 24-8 line 3014
[  686.167348] binder: 28862:28871 transaction failed 29189/-22, size 24-8 line 3014
[  686.175087] binder_alloc: 28868: binder_alloc_buf, no vma
[  686.175130] binder: 28868:28874 transaction failed 29189/-3, size 24-8 line 3137
[  686.195111] binder: 28872:28877 transaction failed 29189/-22, size 24-8 line 3014
[  686.195218] binder: 28872:28877 BC_INCREFS_DONE u0000000000000000 no match
[  686.269651] binder_alloc: 28893: binder_alloc_buf, no vma
[  686.269695] binder: 28893:28894 transaction failed 29189/-3, size 24-8 line 3137
[  686.275982] binder: 28895:28896 transaction failed 29189/-22, size 24-8 line 3014
[  686.281922] binder: 28881:28898 transaction failed 29189/-22, size 24-8 line 3014
[  686.300013] binder: 28901:28903 transaction failed 29189/-22, size 24-8 line 3014
[  686.300149] binder: 28901:28903 BC_INCREFS_DONE u0000000000000000 no match
[  686.378266] binder: 28915:28919 transaction failed 29189/-22, size 24-8 line 3014
[  686.378415] binder: 28908:28918 transaction failed 29189/-22, size 24-8 line 3014
[  686.383840] binder: 28915:28919 BC_INCREFS_DONE u0000000000000000 no match
[  686.402520] binder_alloc: 28916: binder_alloc_buf, no vma
[  686.402564] binder: 28916:28921 transaction failed 29189/-3, size 24-8 line 3137
[  686.416041] binder: 28917:28923 transaction failed 29189/-22, size 24-8 line 3014
[  686.519743] binder: 28936:28938 transaction failed 29189/-22, size 24-8 line 3014
[  686.519848] binder: 28936:28938 BC_INCREFS_DONE u0000000000000000 no match
[  686.525609] binder: 28933:28942 transaction failed 29189/-22, size 24-8 line 3014
[  686.561485] binder: 28943:28948 transaction failed 29189/-22, size 24-8 line 3014
[  686.571175] binder_alloc: 28935: binder_alloc_buf, no vma
[  686.571220] binder: 28935:28947 transaction failed 29189/-3, size 24-8 line 3137
[  686.611382] binder: 28955:28967 transaction failed 29189/-22, size 24-8 line 3014
[  686.629654] binder: 28954:28970 transaction failed 29189/-22, size 24-8 line 3014
[  686.629795] binder: 28954:28970 BC_INCREFS_DONE u0000000000000000 no match
[  686.635691] binder: 28962:28971 transaction failed 29189/-22, size 24-8 line 3014
[  686.637552] binder_alloc: 28965: binder_alloc_buf, no vma
[  686.637608] binder: 28965:28973 transaction failed 29189/-3, size 24-8 line 3137
[  686.704802] binder_alloc: 28980: binder_alloc_buf, no vma
[  686.704844] binder: 28980:28986 transaction failed 29189/-3, size 24-8 line 3137
[  686.754076] binder: 28987:28991 transaction failed 29189/-22, size 24-8 line 3014
[  686.758135] binder: 28996:29003 transaction failed 29189/-22, size 24-8 line 3014
[  686.759130] binder: 28996:29003 BC_INCREFS_DONE u0000000000000000 no match
[  686.777117] binder: 28999:29004 transaction failed 29189/-22, size 24-8 line 3014
[  686.792697] binder_alloc: 28995: binder_alloc_buf, no vma
[  686.792742] binder: 28995:29005 transaction failed 29189/-3, size 24-8 line 3137
[  686.856553] binder: 29017:29020 transaction failed 29189/-22, size 24-8 line 3014
[  686.877501] binder_alloc: 29023: binder_alloc_buf, no vma
[  686.877545] binder: 29023:29025 transaction failed 29189/-3, size 24-8 line 3137
[  686.888939] binder: 29024:29029 transaction failed 29189/-22, size 24-8 line 3014
[  686.889942] binder: 29024:29029 BC_INCREFS_DONE u0000000000000000 no match
[  686.891306] binder: 29026:29034 transaction failed 29189/-22, size 24-8 line 3014
[  686.942339] binder: 29037:29039 transaction failed 29189/-22, size 24-8 line 3014
[  686.987708] binder_alloc: 29042: binder_alloc_buf, no vma
[  686.987752] binder: 29042:29050 transaction failed 29189/-3, size 24-8 line 3137
[  687.024531] binder: 29046:29054 transaction failed 29189/-22, size 24-8 line 3014
[  687.024663] binder: 29046:29054 BC_INCREFS_DONE u0000000000000000 no match
[  687.037365] binder: 29055:29063 transaction failed 29189/-22, size 24-8 line 3014
[  687.050754] binder: 29051:29062 transaction failed 29189/-22, size 24-8 line 3014
[  687.060472] binder_alloc: 29060: binder_alloc_buf, no vma
[  687.060516] binder: 29060:29069 transaction failed 29189/-3, size 24-8 line 3137
[  687.111762] binder: 29075:29077 transaction failed 29189/-22, size 24-8 line 3014
[  687.117827] binder: 29079:29081 transaction failed 29189/-22, size 24-8 line 3014
[  687.127546] binder: 29079:29081 BC_INCREFS_DONE u0000000000000000 no match
[  687.130278] binder: 29074:29080 transaction failed 29189/-22, size 24-8 line 3014
[  687.188171] binder_alloc: 29084: binder_alloc_buf, no vma
[  687.188217] binder: 29084:29089 transaction failed 29189/-3, size 24-8 line 3137
[  687.203739] binder: 29097:29098 transaction failed 29189/-22, size 24-8 line 3014
[  687.209966] binder: 29090:29101 transaction failed 29189/-22, size 24-8 line 3014
[  687.210093] binder: 29090:29101 BC_INCREFS_DONE u0000000000000000 no match
[  687.278311] binder_alloc: 29110: binder_alloc_buf, no vma
[  687.278357] binder: 29110:29116 transaction failed 29189/-3, size 24-8 line 3137
[  687.289071] binder: 29113:29119 transaction failed 29189/-22, size 24-8 line 3014
[  687.298269] binder: 29099:29103 transaction failed 29189/-22, size 24-8 line 3014
[  687.349138] binder: 29124:29129 transaction failed 29189/-22, size 24-8 line 3014
[  687.377339] binder_alloc: 29130: binder_alloc_buf, no vma
[  687.377380] binder: 29130:29133 transaction failed 29189/-3, size 24-8 line 3137
[  687.431931] binder: 29135:29138 transaction failed 29189/-22, size 24-8 line 3014
[  687.432058] binder: 29135:29138 BC_INCREFS_DONE u0000000000000000 no match
[  687.452209] binder: 29150:29155 transaction failed 29189/-22, size 24-8 line 3014
[  687.480215] binder: 29161:29162 transaction failed 29189/-22, size 24-8 line 3014
[  687.480511] binder: 29161:29162 BC_INCREFS_DONE u0000000000000000 no match
[  687.505790] binder_alloc: 29149: binder_alloc_buf, no vma
[  687.505837] binder: 29149:29160 transaction failed 29189/-3, size 24-8 line 3137
[  687.515245] binder: 29137:29163 transaction failed 29189/-22, size 24-8 line 3014
[  687.545492] binder: 29164:29165 transaction failed 29189/-22, size 24-8 line 3014
[  687.590369] binder: 29177:29180 transaction failed 29189/-22, size 24-8 line 3014
[  687.590542] binder: 29177:29180 BC_INCREFS_DONE u0000000000000000 no match
[  687.593009] binder: 29179:29182 transaction failed 29189/-22, size 24-8 line 3014
[  687.613920] binder_alloc: 29175: binder_alloc_buf, no vma
[  687.613969] binder: 29175:29184 transaction failed 29189/-3, size 24-8 line 3137
[  687.675724] binder: 29188:29196 transaction failed 29189/-22, size 24-8 line 3014
[  687.686732] binder: 29194:29198 transaction failed 29189/-22, size 24-8 line 3014
[  687.730913] binder: 29204:29205 transaction failed 29189/-22, size 24-8 line 3014
[  687.731025] binder: 29204:29205 BC_INCREFS_DONE u0000000000000000 no match
[  687.780823] binder_alloc: 29208: binder_alloc_buf, no vma
[  687.780866] binder: 29208:29210 transaction failed 29189/-3, size 24-8 line 3137
[  687.817858] binder: 29217:29221 transaction failed 29189/-22, size 24-8 line 3014
[  687.873712] binder: 29222:29225 transaction failed 29189/-22, size 24-8 line 3014
[  687.887186] binder_alloc: 29232: binder_alloc_buf, no vma
[  687.887231] binder: 29232:29237 transaction failed 29189/-3, size 24-8 line 3137
[  687.887645] binder: 29227:29236 transaction failed 29189/-22, size 24-8 line 3014
[  687.933657] binder: 29224:29229 transaction failed 29189/-22, size 24-8 line 3014
[  687.940301] binder: 29224:29229 BC_INCREFS_DONE u0000000000000000 no match
[  687.959660] binder: 29243:29247 transaction failed 29189/-22, size 24-8 line 3014
[  687.967347] binder: 29242:29249 transaction failed 29189/-22, size 24-8 line 3014
[  687.994586] binder_alloc: 29245: binder_alloc_buf, no vma
[  687.994632] binder: 29245:29251 transaction failed 29189/-3, size 24-8 line 3137
[  688.057885] binder: 29257:29261 transaction failed 29189/-22, size 24-8 line 3014
[  688.060405] binder: 29258:29263 transaction failed 29189/-22, size 24-8 line 3014
[  688.064656] binder: 29264:29274 transaction failed 29189/-22, size 24-8 line 3014
[  688.064744] binder: 29264:29274 BC_INCREFS_DONE u0000000000000000 no match
[  688.114928] binder_alloc: 29270: binder_alloc_buf, no vma
[  688.114973] binder: 29270:29276 transaction failed 29189/-3, size 24-8 line 3137
[  688.142326] binder: 29277:29284 transaction failed 29189/-22, size 24-8 line 3014
[  688.148785] binder: 29281:29285 transaction failed 29189/-22, size 24-8 line 3014
[  688.165333] binder: 29287:29291 transaction failed 29189/-22, size 24-8 line 3014
[  688.165463] binder: 29287:29291 BC_INCREFS_DONE u0000000000000000 no match
[  688.230321] binder_alloc: 29288: binder_alloc_buf, no vma
[  688.230368] binder: 29288:29296 transaction failed 29189/-3, size 24-8 line 3137
[  688.237640] binder: 29309:29310 transaction failed 29189/-22, size 24-8 line 3014
[  688.237788] binder: 29309:29310 BC_INCREFS_DONE u0000000000000000 no match
[  688.244177] binder: 29300:29304 transaction failed 29189/-22, size 24-8 line 3014
[  688.308551] binder_alloc: 29319: binder_alloc_buf, no vma
[  688.308603] binder: 29319:29322 transaction failed 29189/-3, size 24-8 line 3137
[  688.323330] binder: 29314:29328 transaction failed 29189/-22, size 24-8 line 3014
[  688.341694] binder: 29320:29325 transaction failed 29189/-22, size 24-8 line 3014
[  688.385246] binder: 29330:29335 transaction failed 29189/-22, size 24-8 line 3014
[  688.385369] binder: 29330:29335 BC_INCREFS_DONE u0000000000000000 no match
[  688.399845] binder_alloc: 29334: binder_alloc_buf, no vma
[  688.399890] binder: 29334:29347 transaction failed 29189/-3, size 24-8 line 3137
[  688.459851] binder: 29354:29359 transaction failed 29189/-22, size 24-8 line 3014
[  688.477945] binder: 29340:29353 transaction failed 29189/-22, size 24-8 line 3014
[  688.482774] binder: 29349:29361 transaction failed 29189/-22, size 24-8 line 3014
[  688.482899] binder: 29349:29361 BC_INCREFS_DONE u0000000000000000 no match
[  688.529468] binder_alloc: 29365: binder_alloc_buf, no vma
[  688.529512] binder: 29365:29373 transaction failed 29189/-3, size 24-8 line 3137
[  688.531600] binder: 29371:29375 transaction failed 29189/-22, size 24-8 line 3014
[  688.588208] binder: 29368:29381 transaction failed 29189/-22, size 24-8 line 3014
[  688.588336] binder: 29368:29381 BC_INCREFS_DONE u0000000000000000 no match
[  688.592429] binder: 29380:29386 transaction failed 29189/-22, size 24-8 line 3014
[  688.600607] binder: 29385:29391 transaction failed 29189/-22, size 24-8 line 3014
[  688.631990] binder_alloc: 29393: binder_alloc_buf, no vma
[  688.632034] binder: 29393:29396 transaction failed 29189/-3, size 24-8 line 3137
[  688.670159] binder: 29401:29405 transaction failed 29189/-22, size 24-8 line 3014
[  688.670263] binder: 29401:29405 BC_INCREFS_DONE u0000000000000000 no match
[  688.692623] binder: 29406:29410 transaction failed 29189/-22, size 24-8 line 3014
[  688.700615] binder: 29411:29416 transaction failed 29189/-22, size 24-8 line 3014
[  688.720422] binder_alloc: 29412: binder_alloc_buf, no vma
[  688.720467] binder: 29412:29413 transaction failed 29189/-3, size 24-8 line 3137
[  688.784485] binder: 29424:29427 transaction failed 29189/-22, size 24-8 line 3014
[  688.789377] binder: 29423:29429 transaction failed 29189/-22, size 24-8 line 3014
[  688.797324] binder: 29422:29432 transaction failed 29189/-22, size 24-8 line 3014
[  688.797454] binder: 29422:29432 BC_INCREFS_DONE u0000000000000000 no match
[  688.815044] binder_alloc: 29435: binder_alloc_buf, no vma
[  688.815088] binder: 29435:29441 transaction failed 29189/-3, size 24-8 line 3137
[  688.923302] binder: 29455:29458 transaction failed 29189/-22, size 24-8 line 3014
[  688.923401] binder: 29455:29458 BC_INCREFS_DONE u0000000000000000 no match
[  688.930710] binder: 29448:29452 transaction failed 29189/-22, size 24-8 line 3014
[  688.942198] binder_alloc: 29465: binder_alloc_buf, no vma
[  688.942241] binder: 29465:29469 transaction failed 29189/-3, size 24-8 line 3137
[  688.954416] binder: 29459:29464 transaction failed 29189/-22, size 24-8 line 3014
[  688.999773] binder: 29474:29479 transaction failed 29189/-22, size 24-8 line 3014
[  689.000649] binder: 29477:29481 transaction failed 29189/-22, size 24-8 line 3014
[  689.000764] binder: 29477:29481 BC_INCREFS_DONE u0000000000000000 no match
[  689.074414] binder: 29486:29494 transaction failed 29189/-22, size 24-8 line 3014
[  689.092210] binder: 29487:29489 transaction failed 29189/-22, size 24-8 line 3014
[  689.092306] binder: 29487:29489 BC_INCREFS_DONE u0000000000000000 no match
[  689.116163] binder: 29495:29497 transaction failed 29189/-22, size 24-8 line 3014
[  689.132217] binder_alloc: 29498: binder_alloc_buf, no vma
[  689.132261] binder: 29498:29501 transaction failed 29189/-3, size 24-8 line 3137
[  689.183700] binder: 29506:29510 transaction failed 29189/-22, size 24-8 line 3014
[  689.199951] binder: 29508:29516 transaction failed 29189/-22, size 24-8 line 3014
[  689.207783] binder: 29520:29522 transaction failed 29189/-22, size 24-8 line 3014
[  689.207930] binder: 29520:29522 BC_INCREFS_DONE u0000000000000000 no match
[  689.221944] binder_alloc: 29513: binder_alloc_buf, no vma
[  689.221988] binder: 29513:29521 transaction failed 29189/-3, size 24-8 line 3137
[  689.273147] binder: 29530:29533 transaction failed 29189/-22, size 24-8 line 3014
[  689.279507] binder: 29527:29534 transaction failed 29189/-22, size 24-8 line 3014
[  689.285322] binder: 29536:29538 transaction failed 29189/-22, size 24-8 line 3014
[  689.285411] binder: 29536:29538 BC_INCREFS_DONE u0000000000000000 no match
[  689.380118] binder: 29552:29556 transaction failed 29189/-22, size 24-8 line 3014
[  689.399802] binder_alloc: 29547: binder_alloc_buf, no vma
[  689.399847] binder: 29547:29555 transaction failed 29189/-3, size 24-8 line 3137
[  689.405609] binder: 29558:29562 transaction failed 29189/-22, size 24-8 line 3014
[  689.429203] binder: 29561:29567 transaction failed 29189/-22, size 24-8 line 3014
[  689.429937] binder: 29561:29567 BC_INCREFS_DONE u0000000000000000 no match
[  689.499734] binder_alloc: 29582: binder_alloc_buf, no vma
[  689.499776] binder: 29582:29585 transaction failed 29189/-3, size 24-8 line 3137
[  689.505212] binder: 29570:29580 transaction failed 29189/-22, size 24-8 line 3014
[  689.511316] binder: 29583:29589 transaction failed 29189/-22, size 24-8 line 3014
[  689.564547] binder: 29590:29592 transaction failed 29189/-22, size 24-8 line 3014
[  689.564677] binder: 29590:29592 BC_INCREFS_DONE u0000000000000000 no match
[  689.570794] binder: 29591:29599 transaction failed 29189/-22, size 24-8 line 3014
[  689.576408] binder_alloc: 29598: binder_alloc_buf, no vma
[  689.576772] binder: 29598:29603 transaction failed 29189/-3, size 24-8 line 3137
[  689.598545] binder: 29601:29607 transaction failed 29189/-22, size 24-8 line 3014
[  689.645217] binder: 29610:29612 transaction failed 29189/-22, size 24-8 line 3014
[  689.645320] binder: 29610:29612 BC_INCREFS_DONE u0000000000000000 no match
[  689.699617] binder: 29613:29622 transaction failed 29189/-22, size 24-8 line 3014
[  689.720858] binder: 29624:29626 transaction failed 29189/-22, size 24-8 line 3014
[  689.736268] binder_alloc: 29634: binder_alloc_buf, no vma
[  689.736311] binder: 29634:29640 transaction failed 29189/-3, size 24-8 line 3137
[  689.746799] binder: 29635:29641 transaction failed 29189/-22, size 24-8 line 3014
[  689.746914] binder: 29635:29641 BC_INCREFS_DONE u0000000000000000 no match
[  689.755246] binder: 29638:29642 transaction failed 29189/-22, size 24-8 line 3014
[  689.813043] binder: 29646:29649 transaction failed 29189/-22, size 24-8 line 3014
[  689.847409] binder: 29652:29659 transaction failed 29189/-22, size 24-8 line 3014
[  689.878675] binder_alloc: 29658: binder_alloc_buf, no vma
[  689.878732] binder: 29658:29660 transaction failed 29189/-3, size 24-8 line 3137
[  689.932611] binder: 29676:29678 transaction failed 29189/-22, size 24-8 line 3014
[  689.940379] binder: 29677:29682 transaction failed 29189/-22, size 24-8 line 3014
[  689.963728] binder_alloc: 29679: binder_alloc_buf, no vma
[  689.963768] binder: 29679:29685 transaction failed 29189/-3, size 24-8 line 3137
[  689.986536] binder: 29687:29692 transaction failed 29189/-22, size 24-8 line 3014
[  690.011090] binder: 29686:29693 transaction failed 29189/-22, size 24-8 line 3014
[  690.011204] binder: 29686:29693 BC_INCREFS_DONE u0000000000000000 no match
[  690.046495] binder: 29699:29712 transaction failed 29189/-22, size 24-8 line 3014
[  690.058103] binder: 29704:29716 transaction failed 29189/-22, size 24-8 line 3014
[  690.069462] binder_alloc: 29701: binder_alloc_buf, no vma
[  690.069507] binder: 29701:29718 transaction failed 29189/-3, size 24-8 line 3137
[  690.070020] binder: 29713:29719 transaction failed 29189/-22, size 24-8 line 3014
[  690.070164] binder: 29713:29719 BC_INCREFS_DONE u0000000000000000 no match
[  690.150961] binder: 29725:29731 transaction failed 29189/-22, size 24-8 line 3014
[  690.152384] binder: 29734:29738 transaction failed 29189/-22, size 24-8 line 3014
[  690.152684] binder: 29734:29738 BC_INCREFS_DONE u0000000000000000 no match
[  690.153492] binder: 29726:29735 transaction failed 29189/-22, size 24-8 line 3014
[  690.262583] binder: 29754:29757 transaction failed 29189/-22, size 24-8 line 3014
[  690.292428] binder: 29740:29745 transaction failed 29189/-22, size 24-8 line 3014
[  690.293004] binder: 29756:29760 transaction failed 29189/-22, size 24-8 line 3014
[  690.293149] binder: 29756:29760 BC_INCREFS_DONE u0000000000000000 no match
[  690.359279] binder: 29755:29766 transaction failed 29189/-22, size 24-8 line 3014
[  690.407612] binder: 29773:29780 transaction failed 29189/-22, size 24-8 line 3014
[  690.414016] binder_alloc: 29774: binder_alloc_buf, no vma
[  690.414063] binder: 29774:29783 transaction failed 29189/-3, size 24-8 line 3137
[  690.436567] binder: 29788:29792 transaction failed 29189/-22, size 24-8 line 3014
[  690.447913] binder: 29768:29793 transaction failed 29189/-22, size 24-8 line 3014
[  690.448038] binder: 29768:29793 BC_INCREFS_DONE u0000000000000000 no match
[  690.531376] binder: 29801:29810 transaction failed 29189/-22, size 24-8 line 3014
[  690.572095] binder: 29797:29815 transaction failed 29189/-22, size 24-8 line 3014
[  690.577710] binder: 29818:29819 transaction failed 29189/-22, size 24-8 line 3014
[  690.592273] binder: 29811:29825 transaction failed 29189/-22, size 24-8 line 3014
[  690.592555] binder: 29811:29825 BC_INCREFS_DONE u0000000000000000 no match
[  690.622326] binder_alloc: 29813: binder_alloc_buf, no vma
[  690.622373] binder: 29813:29827 transaction failed 29189/-3, size 24-8 line 3137
[  690.666212] binder: 29830:29835 transaction failed 29189/-22, size 24-8 line 3014
[  690.691433] binder: 29837:29842 transaction failed 29189/-22, size 24-8 line 3014
[  690.737355] binder: 29844:29856 transaction failed 29189/-22, size 24-8 line 3014
[  690.737903] binder: 29844:29856 BC_INCREFS_DONE u0000000000000000 no match
[  690.742919] binder_alloc: 29843: binder_alloc_buf, no vma
[  690.742963] binder: 29843:29858 transaction failed 29189/-3, size 24-8 line 3137
[  690.743492] binder: 29845:29859 transaction failed 29189/-22, size 24-8 line 3014
[  690.839824] binder: 29865:29869 transaction failed 29189/-22, size 24-8 line 3014
[  690.846978] binder: 29870:29873 transaction failed 29189/-22, size 24-8 line 3014
[  690.893238] binder_alloc: 29874: binder_alloc_buf, no vma
[  690.893283] binder: 29874:29881 transaction failed 29189/-3, size 24-8 line 3137
[  690.897448] binder: 29872:29876 transaction failed 29189/-22, size 24-8 line 3014
[  690.897553] binder: 29872:29876 BC_INCREFS_DONE u0000000000000000 no match
[  690.909297] binder: 29880:29886 transaction failed 29189/-22, size 24-8 line 3014
[  690.969424] binder: 29890:29896 transaction failed 29189/-22, size 24-8 line 3014
[  690.971293] binder_alloc: 29892: binder_alloc_buf, no vma
[  690.971340] binder: 29892:29898 transaction failed 29189/-3, size 24-8 line 3137
[  690.981151] binder: 29889:29894 transaction failed 29189/-22, size 24-8 line 3014
[  690.981305] binder: 29889:29894 BC_INCREFS_DONE u0000000000000000 no match
[  691.019620] binder: 29903:29904 transaction failed 29189/-22, size 24-8 line 3014
[  691.043116] binder: 29907:29909 transaction failed 29189/-22, size 24-8 line 3014
[  691.043309] binder: 29907:29909 BC_INCREFS_DONE u0000000000000000 no match
[  691.052627] binder: 29911:29919 transaction failed 29189/-22, size 24-8 line 3014
[  691.074239] binder: 29922:29926 transaction failed 29189/-22, size 24-8 line 3014
[  691.087861] binder_alloc: 29916: binder_alloc_buf, no vma
[  691.087908] binder: 29916:29921 transaction failed 29189/-3, size 24-8 line 3137
[  691.146371] binder: 29933:29943 transaction failed 29189/-22, size 24-8 line 3014
[  691.161992] binder: 29923:29938 transaction failed 29189/-22, size 24-8 line 3014
[  691.162172] binder: 29923:29938 BC_INCREFS_DONE u0000000000000000 no match
[  691.174329] binder: 29945:29954 transaction failed 29189/-22, size 24-8 line 3014
[  691.183585] binder_alloc: 29942: binder_alloc_buf, no vma
[  691.183629] binder: 29942:29950 transaction failed 29189/-3, size 24-8 line 3137
[  691.265224] binder: 29963:29965 transaction failed 29189/-22, size 24-8 line 3014
[  691.276587] binder_alloc: 29969: binder_alloc_buf, no vma
[  691.276632] binder: 29969:29970 transaction failed 29189/-3, size 24-8 line 3137
[  691.281788] binder: 29960:29978 transaction failed 29189/-22, size 24-8 line 3014
[  691.305395] binder: 29962:29980 transaction failed 29189/-22, size 24-8 line 3014
[  691.305531] binder: 29962:29980 BC_INCREFS_DONE u0000000000000000 no match
[  691.348606] binder: 29986:29990 transaction failed 29189/-22, size 24-8 line 3014
[  691.380166] binder_alloc: 29993: binder_alloc_buf, no vma
[  691.380212] binder: 29993:30000 transaction failed 29189/-3, size 24-8 line 3137
[  691.399115] binder: 30003:30004 transaction failed 29189/-22, size 24-8 line 3014
[  691.408127] binder: 29994:30005 transaction failed 29189/-22, size 24-8 line 3014
[  691.415136] binder: 29995:30006 transaction failed 29189/-22, size 24-8 line 3014
[  691.415247] binder: 29995:30006 BC_INCREFS_DONE u0000000000000000 no match
[  691.447085] binder_alloc: 30008: binder_alloc_buf, no vma
[  691.447130] binder: 30008:30014 transaction failed 29189/-3, size 24-8 line 3137
[  691.461019] binder: 30013:30016 transaction failed 29189/-22, size 24-8 line 3014
[  691.461143] binder: 30013:30016 BC_INCREFS_DONE u0000000000000000 no match
[  691.492885] binder: 30020:30021 transaction failed 29189/-22, size 24-8 line 3014
[  691.508791] binder: 30026:30029 transaction failed 29189/-22, size 24-8 line 3014
[  691.543217] binder_alloc: 30030: binder_alloc_buf, no vma
[  691.543259] binder: 30030:30033 transaction failed 29189/-3, size 24-8 line 3137
[  691.570496] binder: 30039:30046 transaction failed 29189/-22, size 24-8 line 3014
[  691.577370] binder: 30044:30048 transaction failed 29189/-22, size 24-8 line 3014
[  691.607973] binder: 30045:30051 transaction failed 29189/-22, size 24-8 line 3014
[  691.608074] binder: 30045:30051 BC_INCREFS_DONE u0000000000000000 no match
[  691.654881] binder_alloc: 30050: binder_alloc_buf, no vma
[  691.654925] binder: 30050:30054 transaction failed 29189/-3, size 24-8 line 3137
[  691.674992] binder: 30060:30061 transaction failed 29189/-22, size 24-8 line 3014
[  691.693951] binder: 30059:30064 transaction failed 29189/-22, size 24-8 line 3014
[  691.710419] binder: 30063:30069 transaction failed 29189/-22, size 24-8 line 3014
[  691.711405] binder: 30063:30069 BC_INCREFS_DONE u0000000000000000 no match
[  691.807973] binder_alloc: 30071: binder_alloc_buf, no vma
[  691.808020] binder: 30080:30083 transaction failed 29189/-3, size 24-8 line 3137
[  691.808160] binder: 30080:30083 BC_INCREFS_DONE u0000000000000000 no match
[  691.812327] binder_alloc: 30071: binder_alloc_buf, no vma
[  691.812374] binder: 30071:30087 transaction failed 29189/-3, size 24-8 line 3137
[  691.824287] binder: 30078:30085 transaction failed 29189/-22, size 24-8 line 3014
[  691.828645] binder: 30088:30091 transaction failed 29189/-22, size 24-8 line 3014
[  691.881944] binder: 30098:30100 transaction failed 29189/-22, size 24-8 line 3014
[  691.882054] binder: 30098:30100 BC_INCREFS_DONE u0000000000000000 no match
[  691.908282] binder: 30102:30108 transaction failed 29189/-22, size 24-8 line 3014
[  691.919829] binder_alloc: 30105: binder_alloc_buf, no vma
[  691.919868] binder: 30105:30109 transaction failed 29189/-3, size 24-8 line 3137
[  691.927308] binder: 30110:30112 transaction failed 29189/-22, size 24-8 line 3014
[  691.963233] binder: 30113:30116 transaction failed 29189/-22, size 24-8 line 3014
[  691.963369] binder: 30113:30116 BC_INCREFS_DONE u0000000000000000 no match
[  692.057718] binder_alloc: 30121: binder_alloc_buf, no vma
[  692.057763] binder: 30121:30131 transaction failed 29189/-3, size 24-8 line 3137
[  692.062329] binder: 30126:30130 transaction failed 29189/-22, size 24-8 line 3014
[  692.071576] binder: 30137:30140 transaction failed 29189/-22, size 24-8 line 3014
[  692.124129] binder_alloc: 30151: binder_alloc_buf, no vma
[  692.124174] binder: 30151:30152 transaction failed 29189/-3, size 24-8 line 3137
[  692.183219] binder: 30156:30158 transaction failed 29189/-22, size 24-8 line 3014
[  692.188025] binder: 30145:30155 transaction failed 29189/-22, size 24-8 line 3014
[  692.188138] binder: 30145:30155 BC_INCREFS_DONE u0000000000000000 no match
[  692.200378] binder: 30159:30165 transaction failed 29189/-22, size 24-8 line 3014
[  692.280026] binder: 30170:30185 transaction failed 29189/-22, size 24-8 line 3014
[  692.292714] binder: 30184:30186 transaction failed 29189/-22, size 24-8 line 3014
[  692.292837] binder: 30184:30186 BC_INCREFS_DONE u0000000000000000 no match
[  692.308131] binder_alloc: 30175: binder_alloc_buf, no vma
[  692.308180] binder: 30175:30188 transaction failed 29189/-3, size 24-8 line 3137
[  692.314187] binder: 30176:30189 transaction failed 29189/-22, size 24-8 line 3014
[  692.377886] binder: 30192:30193 transaction failed 29189/-22, size 24-8 line 3014
[  692.403041] binder: 30200:30205 transaction failed 29189/-22, size 24-8 line 3014
[  692.403177] binder: 30200:30205 BC_INCREFS_DONE u0000000000000000 no match
[  692.409095] binder: 30207:30212 transaction failed 29189/-22, size 24-8 line 3014
[  692.469977] binder_alloc: 30204: binder_alloc_buf, no vma
[  692.470021] binder: 30204:30214 transaction failed 29189/-3, size 24-8 line 3137
[  692.479795] binder: 30218:30220 transaction failed 29189/-22, size 24-8 line 3014
[  692.483588] binder: 30219:30223 transaction failed 29189/-22, size 24-8 line 3014
[  692.483695] binder: 30219:30223 BC_INCREFS_DONE u0000000000000000 no match
[  692.495572] binder: 30216:30224 transaction failed 29189/-22, size 24-8 line 3014
[  692.555876] binder_alloc: 30228: binder_alloc_buf, no vma
[  692.555918] binder: 30228:30240 transaction failed 29189/-3, size 24-8 line 3137
[  692.596743] binder: 30229:30242 transaction failed 29189/-22, size 24-8 line 3014
[  692.621338] binder: 30238:30244 transaction failed 29189/-22, size 24-8 line 3014
[  692.667290] binder: 30251:30256 transaction failed 29189/-22, size 24-8 line 3014
[  692.667411] binder: 30251:30256 BC_INCREFS_DONE u0000000000000000 no match
[  692.675711] binder: 30252:30262 transaction failed 29189/-22, size 24-8 line 3014
[  692.680192] binder_alloc: 30258: binder_alloc_buf, no vma
[  692.680236] binder: 30258:30273 transaction failed 29189/-3, size 24-8 line 3137
[  692.692368] binder: 30254:30263 transaction failed 29189/-22, size 24-8 line 3014
[  692.752064] binder_alloc: 30278: binder_alloc_buf, no vma
[  692.752120] binder: 30278:30280 transaction failed 29189/-3, size 24-8 line 3137
[  692.803893] binder: 30277:30291 transaction failed 29189/-22, size 24-8 line 3014
[  692.807756] binder: 30274:30294 transaction failed 29189/-22, size 24-8 line 3014
[  692.807901] binder: 30274:30294 BC_INCREFS_DONE u0000000000000000 no match
[  692.871932] binder_alloc: 30295: binder_alloc_buf, no vma
[  692.871977] binder: 30295:30302 transaction failed 29189/-3, size 24-8 line 3137
[  692.934207] binder: 30296:30312 transaction failed 29189/-22, size 24-8 line 3014
[  692.936267] binder: 30311:30315 transaction failed 29189/-22, size 24-8 line 3014
[  692.950260] binder_alloc: 30318: binder_alloc_buf, no vma
[  692.950309] binder: 30318:30325 transaction failed 29189/-3, size 24-8 line 3137
[  693.009629] binder: 30314:30336 transaction failed 29189/-22, size 24-8 line 3014
[  693.009778] binder: 30314:30336 BC_INCREFS_DONE u0000000000000000 no match
[  693.021278] binder: 30331:30339 transaction failed 29189/-22, size 24-8 line 3014
[  693.040195] binder: 30329:30338 transaction failed 29189/-22, size 24-8 line 3014
[  693.060074] binder_alloc: 30337: binder_alloc_buf, no vma
[  693.060119] binder: 30337:30343 transaction failed 29189/-3, size 24-8 line 3137
[  693.089554] binder: 30347:30352 transaction failed 29189/-22, size 24-8 line 3014
[  693.109926] binder: 30349:30355 transaction failed 29189/-22, size 24-8 line 3014
[  693.110068] binder: 30349:30355 BC_INCREFS_DONE u0000000000000000 no match
[  693.147205] binder: 30357:30364 transaction failed 29189/-22, size 24-8 line 3014
[  693.152276] binder_alloc: 30361: binder_alloc_buf, no vma
[  693.152320] binder: 30361:30367 transaction failed 29189/-3, size 24-8 line 3137
[  693.175705] binder: 30368:30374 transaction failed 29189/-22, size 24-8 line 3014
[  693.256057] binder: 30378:30390 transaction failed 29189/-22, size 24-8 line 3014
[  693.257545] binder: 30378:30390 BC_INCREFS_DONE u0000000000000000 no match
[  693.262270] binder: 30383:30387 transaction failed 29189/-22, size 24-8 line 3014
[  693.322078] binder_alloc: 30394: binder_alloc_buf, no vma
[  693.322132] binder: 30394:30402 transaction failed 29189/-3, size 24-8 line 3137
[  693.327666] binder: 30399:30403 transaction failed 29189/-22, size 24-8 line 3014
[  693.366830] binder: 30397:30409 transaction failed 29189/-22, size 24-8 line 3014
[  693.379799] binder: 30408:30411 transaction failed 29189/-22, size 24-8 line 3014
[  693.424503] binder_alloc: 30417: binder_alloc_buf, no vma
[  693.424547] binder: 30417:30424 transaction failed 29189/-3, size 24-8 line 3137
[  693.445620] binder: 30416:30430 transaction failed 29189/-22, size 24-8 line 3014
[  693.445727] binder: 30416:30430 BC_INCREFS_DONE u0000000000000000 no match
[  693.448583] binder: 30418:30429 transaction failed 29189/-22, size 24-8 line 3014
[  693.482768] binder: 30431:30433 transaction failed 29189/-22, size 24-8 line 3014
[  693.540286] binder_alloc: 30443: binder_alloc_buf, no vma
[  693.540339] binder: 30443:30448 transaction failed 29189/-3, size 24-8 line 3137
[  693.583442] binder: 30458:30460 transaction failed 29189/-22, size 24-8 line 3014
[  693.600471] binder: 30455:30466 transaction failed 29189/-22, size 24-8 line 3014
[  693.618290] binder: 30452:30464 transaction failed 29189/-22, size 24-8 line 3014
[  693.618395] binder: 30452:30464 BC_INCREFS_DONE u0000000000000000 no match
[  693.627000] binder_alloc: 30463: binder_alloc_buf, no vma
[  693.627046] binder: 30463:30467 transaction failed 29189/-3, size 24-8 line 3137
[  693.694656] binder: 30478:30488 transaction failed 29189/-22, size 24-8 line 3014
[  693.697314] binder: 30475:30481 transaction failed 29189/-22, size 24-8 line 3014
[  693.702595] binder: 30483:30489 transaction failed 29189/-22, size 24-8 line 3014
[  693.702706] binder: 30483:30489 BC_INCREFS_DONE u0000000000000000 no match
[  693.798881] binder_alloc: 30492: binder_alloc_buf, no vma
[  693.798923] binder: 30492:30495 transaction failed 29189/-3, size 24-8 line 3137
[  693.828792] binder: 30498:30501 transaction failed 29189/-22, size 24-8 line 3014
[  693.828925] binder: 30498:30501 BC_INCREFS_DONE u0000000000000000 no match
[  693.842551] binder: 30500:30507 transaction failed 29189/-22, size 24-8 line 3014
[  693.856324] binder: 30494:30503 transaction failed 29189/-22, size 24-8 line 3014
[  693.867272] binder_alloc: 30514: binder_alloc_buf, no vma
[  693.867315] binder: 30514:30517 transaction failed 29189/-3, size 24-8 line 3137
[  693.940124] binder: 30522:30527 transaction failed 29189/-22, size 24-8 line 3014
[  693.940983] binder: 30522:30527 BC_INCREFS_DONE u0000000000000000 no match
[  693.969279] binder_alloc: 30524: binder_alloc_buf, no vma
[  693.969323] binder: 30524:30525 transaction failed 29189/-3, size 24-8 line 3137
[  693.969948] binder_alloc: 30524: binder_alloc_buf, no vma
[  693.969985] binder: 30531:30534 transaction failed 29189/-3, size 24-8 line 3137
[  693.987907] binder: 30532:30539 transaction failed 29189/-22, size 24-8 line 3014
[  694.021751] binder: 30535:30545 transaction failed 29189/-22, size 24-8 line 3014
[  694.021899] binder: 30535:30545 BC_INCREFS_DONE u0000000000000000 no match
[  694.055009] binder: 30549:30550 transaction failed 29189/-22, size 24-8 line 3014
[  694.065268] binder_alloc: 30552: binder_alloc_buf, no vma
[  694.065326] binder: 30552:30554 transaction failed 29189/-3, size 24-8 line 3137
[  694.130014] binder: 30566:30571 transaction failed 29189/-22, size 24-8 line 3014
[  694.134768] binder_alloc: 30569: binder_alloc_buf, no vma
[  694.134811] binder: 30569:30573 transaction failed 29189/-3, size 24-8 line 3137
[  694.191430] binder: 30575:30580 transaction failed 29189/-22, size 24-8 line 3014
[  694.191545] binder: 30575:30580 BC_INCREFS_DONE u0000000000000000 no match
[  694.195304] binder: 30562:30581 transaction failed 29189/-22, size 24-8 line 3014
[  694.215886] binder: 30583:30587 transaction failed 29189/-22, size 24-8 line 3014
[  694.291180] binder: 30601:30607 transaction failed 29189/-22, size 24-8 line 3014
[  694.300511] binder_alloc: 30590: binder_alloc_buf, no vma
[  694.300554] binder: 30590:30606 transaction failed 29189/-3, size 24-8 line 3137
[  694.332637] binder: 30604:30610 transaction failed 29189/-22, size 24-8 line 3014
[  694.332747] binder: 30604:30610 BC_INCREFS_DONE u0000000000000000 no match
[  694.344032] binder: 30612:30616 transaction failed 29189/-22, size 24-8 line 3014
[  694.348742] binder: 30609:30611 transaction failed 29189/-22, size 24-8 line 3014
[  694.405493] binder: 30627:30630 transaction failed 29189/-22, size 24-8 line 3014
[  694.407122] binder_alloc: 30620: binder_alloc_buf, no vma
[  694.407164] binder: 30620:30624 transaction failed 29189/-3, size 24-8 line 3137
[  694.416261] binder: 30627:30630 BC_INCREFS_DONE u0000000000000000 no match
[  694.419793] binder: 30621:30632 transaction failed 29189/-22, size 24-8 line 3014
[  694.447868] binder: 30634:30636 transaction failed 29189/-22, size 24-8 line 3014
[  694.507042] binder: 30647:30651 transaction failed 29189/-22, size 24-8 line 3014
[  694.507158] binder: 30647:30651 BC_INCREFS_DONE u0000000000000000 no match
[  694.524515] binder: 30653:30654 transaction failed 29189/-22, size 24-8 line 3014
[  694.554674] binder: 30646:30661 transaction failed 29189/-22, size 24-8 line 3014
[  694.610554] binder_alloc: 30665: binder_alloc_buf, no vma
[  694.610610] binder: 30665:30671 transaction failed 29189/-3, size 24-8 line 3137
[  694.611203] binder: 30666:30672 transaction failed 29189/-22, size 24-8 line 3014
[  694.615498] binder: 30664:30673 transaction failed 29189/-22, size 24-8 line 3014
[  694.615639] binder: 30664:30673 BC_INCREFS_DONE u0000000000000000 no match
[  694.655415] binder: 30676:30679 transaction failed 29189/-22, size 24-8 line 3014
[  694.723427] binder: 30696:30701 transaction failed 29189/-22, size 24-8 line 3014
[  694.723532] binder: 30696:30701 BC_INCREFS_DONE u0000000000000000 no match
[  694.755753] binder_alloc: 30703: binder_alloc_buf, no vma
[  694.755794] binder: 30703:30707 transaction failed 29189/-3, size 24-8 line 3137
[  694.770126] binder: 30700:30705 transaction failed 29189/-22, size 24-8 line 3014
[  694.780805] binder: 30692:30704 transaction failed 29189/-22, size 24-8 line 3014
[  694.827149] binder: 30716:30721 transaction failed 29189/-22, size 24-8 line 3014
[  694.836690] binder: 30710:30719 transaction failed 29189/-22, size 24-8 line 3014
[  694.836815] binder: 30710:30719 BC_INCREFS_DONE u0000000000000000 no match
[  694.850563] binder_alloc: 30718: binder_alloc_buf, no vma
[  694.850609] binder: 30718:30727 transaction failed 29189/-3, size 24-8 line 3137
[  694.893521] binder: 30729:30731 transaction failed 29189/-22, size 24-8 line 3014
[  694.924269] binder: 30733:30739 transaction failed 29189/-22, size 24-8 line 3014
[  694.960914] binder: 30742:30750 transaction failed 29189/-22, size 24-8 line 3014
[  694.961024] binder: 30742:30750 BC_INCREFS_DONE u0000000000000000 no match
[  694.983201] binder: 30747:30753 transaction failed 29189/-22, size 24-8 line 3014
[  695.025247] binder: 30757:30763 transaction failed 29189/-22, size 24-8 line 3014
[  695.035378] binder: 30758:30764 transaction failed 29189/-22, size 24-8 line 3014
[  695.035485] binder: 30758:30764 BC_INCREFS_DONE u0000000000000000 no match
[  695.041785] binder_alloc: 30751: binder_alloc_buf, no vma
[  695.041833] binder: 30751:30774 transaction failed 29189/-3, size 24-8 line 3137
[  695.045593] binder_alloc: 30751: binder_alloc_buf, no vma
[  695.045639] binder: 30766:30775 transaction failed 29189/-3, size 24-8 line 3137
[  695.141485] binder: 30779:30784 transaction failed 29189/-22, size 24-8 line 3014
[  695.165749] binder: 30781:30794 transaction failed 29189/-22, size 24-8 line 3014
[  695.189049] binder: 30793:30795 transaction failed 29189/-22, size 24-8 line 3014
[  695.189192] binder: 30793:30795 BC_INCREFS_DONE u0000000000000000 no match
[  695.235265] binder: 30802:30806 transaction failed 29189/-22, size 24-8 line 3014
[  695.237324] binder_alloc: 30799: binder_alloc_buf, no vma
[  695.237367] binder: 30799:30804 transaction failed 29189/-3, size 24-8 line 3137
[  695.301540] binder: 30813:30818 transaction failed 29189/-22, size 24-8 line 3014
[  695.301694] binder: 30812:30815 transaction failed 29189/-22, size 24-8 line 3014
[  695.302060] binder: 30813:30818 BC_INCREFS_DONE u0000000000000000 no match
[  695.333617] binder: 30816:30820 transaction failed 29189/-22, size 24-8 line 3014
[  695.338983] binder_alloc: 30828: binder_alloc_buf, no vma
[  695.339026] binder: 30828:30832 transaction failed 29189/-3, size 24-8 line 3137
[  695.349165] binder: 30824:30833 transaction failed 29189/-22, size 24-8 line 3014
[  695.432225] binder: 30837:30849 transaction failed 29189/-22, size 24-8 line 3014
[  695.432325] binder: 30837:30849 BC_INCREFS_DONE u0000000000000000 no match
[  695.481543] binder: 30848:30853 transaction failed 29189/-22, size 24-8 line 3014
[  695.508056] binder: 30845:30861 transaction failed 29189/-22, size 24-8 line 3014
[  695.575169] binder: 30868:30874 transaction failed 29189/-22, size 24-8 line 3014
[  695.575600] binder: 30871:30875 transaction failed 29189/-22, size 24-8 line 3014
[  695.576056] binder: 30868:30874 BC_INCREFS_DONE u0000000000000000 no match
[  695.579738] binder_alloc: 30851: binder_alloc_buf, no vma
[  695.579784] binder: 30851:30866 transaction failed 29189/-3, size 24-8 line 3137
[  695.638450] binder: 30879:30882 transaction failed 29189/-22, size 24-8 line 3014
[  695.670439] binder: 30884:30889 transaction failed 29189/-22, size 24-8 line 3014
[  695.670582] binder: 30884:30889 BC_INCREFS_DONE u0000000000000000 no match
[  695.676326] binder: 30890:30894 transaction failed 29189/-22, size 24-8 line 3014
[  695.716293] binder_alloc: 30895: binder_alloc_buf, no vma
[  695.716335] binder: 30895:30903 transaction failed 29189/-3, size 24-8 line 3137
[  695.737550] binder: 30905:30913 transaction failed 29189/-22, size 24-8 line 3014
[  695.742412] binder: 30896:30910 transaction failed 29189/-22, size 24-8 line 3014
[  695.744322] binder: 30904:30912 transaction failed 29189/-22, size 24-8 line 3014
[  695.746639] binder: 30904:30912 BC_INCREFS_DONE u0000000000000000 no match
[  695.834004] binder_alloc: 30929: binder_alloc_buf, no vma
[  695.834047] binder: 30929:30933 transaction failed 29189/-3, size 24-8 line 3137
[  695.843204] binder: 30928:30935 transaction failed 29189/-22, size 24-8 line 3014
[  695.848836] binder: 30931:30936 transaction failed 29189/-22, size 24-8 line 3014
[  695.867975] binder: 30925:30940 transaction failed 29189/-22, size 24-8 line 3014
[  695.868121] binder: 30925:30940 BC_INCREFS_DONE u0000000000000000 no match
[  695.934313] binder_alloc: 30944: binder_alloc_buf, no vma
[  695.934350] binder: 30944:30946 transaction failed 29189/-3, size 24-8 line 3137
[  695.936556] binder: 30945:30950 transaction failed 29189/-22, size 24-8 line 3014
[  695.959222] binder: 30951:30958 transaction failed 29189/-22, size 24-8 line 3014
[  695.963429] binder: 30949:30962 transaction failed 29189/-22, size 24-8 line 3014
[  695.963547] binder: 30949:30962 BC_INCREFS_DONE u0000000000000000 no match
[  696.059422] binder: 30970:30976 transaction failed 29189/-22, size 24-8 line 3014
[  696.061461] binder: 30969:30972 transaction failed 29189/-22, size 24-8 line 3014
[  696.061570] binder: 30969:30972 BC_INCREFS_DONE u0000000000000000 no match
[  696.077501] binder_alloc: 30965: binder_alloc_buf, no vma
[  696.077545] binder: 30965:30979 transaction failed 29189/-3, size 24-8 line 3137
[  696.144149] binder: 30983:30993 transaction failed 29189/-22, size 24-8 line 3014
[  696.214122] binder: 30997:30999 transaction failed 29189/-22, size 24-8 line 3014
[  696.217819] binder_alloc: 31002: binder_alloc_buf, no vma
[  696.217865] binder: 31002:31004 transaction failed 29189/-3, size 24-8 line 3137
[  696.244573] binder: 31006:31014 transaction failed 29189/-22, size 24-8 line 3014
[  696.244692] binder: 31006:31014 BC_INCREFS_DONE u0000000000000000 no match
[  696.245669] binder: 30995:31016 transaction failed 29189/-22, size 24-8 line 3014
[  696.337640] binder_alloc: 31025: binder_alloc_buf, no vma
[  696.337687] binder: 31025:31031 transaction failed 29189/-3, size 24-8 line 3137
[  696.338288] binder: 31021:31032 transaction failed 29189/-22, size 24-8 line 3014
[  696.377907] binder: 31026:31035 transaction failed 29189/-22, size 24-8 line 3014
[  696.386719] binder: 31029:31045 transaction failed 29189/-22, size 24-8 line 3014
[  696.394298] binder: 31029:31045 BC_INCREFS_DONE u0000000000000000 no match
[  696.430119] binder: 31050:31052 transaction failed 29189/-22, size 24-8 line 3014
[  696.437763] binder: 31055:31056 transaction failed 29189/-22, size 24-8 line 3014
[  696.463115] binder_alloc: 31053: binder_alloc_buf, no vma
[  696.463158] binder: 31053:31057 transaction failed 29189/-3, size 24-8 line 3137
[  696.517684] binder: 31060:31067 transaction failed 29189/-22, size 24-8 line 3014
[  696.543096] binder_alloc: 31069: binder_alloc_buf, no vma
[  696.543141] binder: 31069:31075 transaction failed 29189/-3, size 24-8 line 3137
[  696.546084] binder: 31063:31076 transaction failed 29189/-22, size 24-8 line 3014
[  696.546203] binder: 31063:31076 BC_INCREFS_DONE u0000000000000000 no match
[  696.565070] binder: 31073:31077 transaction failed 29189/-22, size 24-8 line 3014
[  696.610271] binder: 31079:31083 transaction failed 29189/-22, size 24-8 line 3014
[  696.635899] binder_alloc: 31081: binder_alloc_buf, no vma
[  696.635999] binder: 31081:31085 transaction failed 29189/-3, size 24-8 line 3137
[  696.675061] binder: 31097:31101 transaction failed 29189/-22, size 24-8 line 3014
[  696.697328] binder_alloc: 31102: binder_alloc_buf, no vma
[  696.697373] binder: 31102:31109 transaction failed 29189/-3, size 24-8 line 3137
[  696.698037] binder: 31096:31108 transaction failed 29189/-22, size 24-8 line 3014
[  696.699075] binder: 31096:31108 BC_INCREFS_DONE u0000000000000000 no match
[  696.769476] binder: 31115:31121 transaction failed 29189/-22, size 24-8 line 3014
[  696.790426] binder: 31116:31126 transaction failed 29189/-22, size 24-8 line 3014
[  696.796308] binder: 31117:31130 transaction failed 29189/-22, size 24-8 line 3014
[  696.796411] binder: 31117:31130 BC_INCREFS_DONE u0000000000000000 no match
[  696.836774] binder_alloc: 31127: binder_alloc_buf, no vma
[  696.836819] binder: 31127:31131 transaction failed 29189/-3, size 24-8 line 3137
[  696.887448] binder: 31149:31153 transaction failed 29189/-22, size 24-8 line 3014
[  696.917382] binder: 31143:31154 transaction failed 29189/-22, size 24-8 line 3014
[  696.917524] binder: 31143:31154 BC_INCREFS_DONE u0000000000000000 no match
[  696.932235] binder: 31136:31140 transaction failed 29189/-22, size 24-8 line 3014
[  696.964220] binder_alloc: 31157: binder_alloc_buf, no vma
[  696.964265] binder: 31157:31159 transaction failed 29189/-3, size 24-8 line 3137
[  697.020448] binder: 31179:31185 transaction failed 29189/-22, size 24-8 line 3014
[  697.020928] binder: 31175:31182 transaction failed 29189/-22, size 24-8 line 3014
[  697.030573] binder_alloc: 31181: binder_alloc_buf, no vma
[  697.030620] binder: 31181:31186 transaction failed 29189/-3, size 24-8 line 3137
[  697.033304] binder: 31176:31189 transaction failed 29189/-22, size 24-8 line 3014
[  697.033420] binder: 31176:31189 BC_INCREFS_DONE u0000000000000000 no match
[  697.099686] binder: 31195:31198 transaction failed 29189/-22, size 24-8 line 3014
[  697.135836] binder_alloc: 31200: binder_alloc_buf, no vma
[  697.136307] binder: 31200:31210 transaction failed 29189/-3, size 24-8 line 3137
[  697.143560] binder: 31205:31209 transaction failed 29189/-22, size 24-8 line 3014
[  697.143946] binder: 31205:31209 BC_INCREFS_DONE u0000000000000000 no match
[  697.154463] binder: 31192:31203 transaction failed 29189/-22, size 24-8 line 3014
[  697.203848] binder: 31211:31214 transaction failed 29189/-22, size 24-8 line 3014
[  697.222094] binder_alloc: 31218: binder_alloc_buf, no vma
[  697.222140] binder: 31218:31219 transaction failed 29189/-3, size 24-8 line 3137
[  697.279241] binder: 31224:31239 transaction failed 29189/-22, size 24-8 line 3014
[  697.279548] binder: 31224:31239 BC_INCREFS_DONE u0000000000000000 no match
[  697.281473] binder_alloc: 31237: binder_alloc_buf, no vma
[  697.281517] binder: 31237:31241 transaction failed 29189/-3, size 24-8 line 3137
[  697.301159] binder: 31234:31236 transaction failed 29189/-22, size 24-8 line 3014
[  697.315382] binder: 31248:31250 transaction failed 29189/-22, size 24-8 line 3014
[  697.403226] binder: 31252:31264 transaction failed 29189/-22, size 24-8 line 3014
[  697.403380] binder: 31252:31264 BC_INCREFS_DONE u0000000000000000 no match
[  697.406225] binder_alloc: 31266: binder_alloc_buf, no vma
[  697.406269] binder: 31266:31270 transaction failed 29189/-3, size 24-8 line 3137
[  697.444842] binder: 31257:31265 transaction failed 29189/-22, size 24-8 line 3014
[  697.474739] binder: 31274:31280 transaction failed 29189/-22, size 24-8 line 3014
[  697.477468] binder: 31279:31282 transaction failed 29189/-22, size 24-8 line 3014
[  697.477585] binder: 31279:31282 BC_INCREFS_DONE u0000000000000000 no match
[  697.566045] binder: 31296:31303 transaction failed 29189/-22, size 24-8 line 3014
[  697.580862] binder_alloc: 31290: binder_alloc_buf, no vma
[  697.580904] binder: 31290:31294 transaction failed 29189/-3, size 24-8 line 3137
[  697.582575] binder: 31298:31309 transaction failed 29189/-22, size 24-8 line 3014
[  697.582702] binder: 31298:31309 BC_INCREFS_DONE u0000000000000000 no match
[  697.630260] binder: 31297:31304 transaction failed 29189/-22, size 24-8 line 3014
[  697.690461] binder: 31314:31320 transaction failed 29189/-22, size 24-8 line 3014
[  697.690910] binder: 31314:31320 BC_INCREFS_DONE u0000000000000000 no match
[  697.691877] binder_alloc: 31316: binder_alloc_buf, no vma
[  697.691918] binder: 31316:31324 transaction failed 29189/-3, size 24-8 line 3137
[  697.698892] binder: 31318:31329 transaction failed 29189/-22, size 24-8 line 3014
[  697.750013] binder: 31336:31337 transaction failed 29189/-22, size 24-8 line 3014
[  697.781608] binder_alloc: 31334: binder_alloc_buf, no vma
[  697.781651] binder: 31334:31339 transaction failed 29189/-3, size 24-8 line 3137
[  697.792133] binder: 31338:31344 transaction failed 29189/-22, size 24-8 line 3014
[  697.792262] binder: 31338:31344 BC_INCREFS_DONE u0000000000000000 no match
[  697.808012] binder: 31345:31346 transaction failed 29189/-22, size 24-8 line 3014
[  697.897712] binder: 31352:31361 transaction failed 29189/-22, size 24-8 line 3014
[  697.918003] binder: 31358:31364 transaction failed 29189/-22, size 24-8 line 3014
[  697.926685] binder: 31358:31364 BC_INCREFS_DONE u0000000000000000 no match
[  697.933380] binder: 31351:31370 transaction failed 29189/-22, size 24-8 line 3014
[  697.978420] binder: 31374:31378 transaction failed 29189/-22, size 24-8 line 3014
[  697.980013] binder_alloc: 31367: binder_alloc_buf, no vma
[  697.980061] binder: 31367:31379 transaction failed 29189/-3, size 24-8 line 3137
[  698.048426] binder_alloc: 31391: binder_alloc_buf, no vma
[  698.048468] binder: 31391:31397 transaction failed 29189/-3, size 24-8 line 3137
[  698.050773] binder: 31390:31402 transaction failed 29189/-22, size 24-8 line 3014
[  698.052604] binder: 31396:31403 transaction failed 29189/-22, size 24-8 line 3014
[  698.052720] binder: 31396:31403 BC_INCREFS_DONE u0000000000000000 no match
[  698.058478] binder: 31376:31385 transaction failed 29189/-22, size 24-8 line 3014
[  698.117856] binder: 31411:31413 transaction failed 29189/-22, size 24-8 line 3014
[  698.159269] binder_alloc: 31409: binder_alloc_buf, no vma
[  698.159313] binder: 31409:31417 transaction failed 29189/-3, size 24-8 line 3137
[  698.164340] binder: 31414:31422 transaction failed 29189/-22, size 24-8 line 3014
[  698.166641] binder: 31415:31425 transaction failed 29189/-22, size 24-8 line 3014
[  698.166788] binder: 31415:31425 BC_INCREFS_DONE u0000000000000000 no match
[  698.187733] binder: 31420:31426 transaction failed 29189/-22, size 24-8 line 3014
[  698.250852] binder: 31431:31437 transaction failed 29189/-22, size 24-8 line 3014
[  698.250987] binder: 31433:31439 transaction failed 29189/-22, size 24-8 line 3014
[  698.251144] binder: 31433:31439 BC_INCREFS_DONE u0000000000000000 no match
[  698.269206] binder_alloc: 31430: binder_alloc_buf, no vma
[  698.269250] binder: 31430:31447 transaction failed 29189/-3, size 24-8 line 3137
[  698.279454] binder: 31440:31444 transaction failed 29189/-22, size 24-8 line 3014
[  698.339849] binder: 31457:31460 transaction failed 29189/-22, size 24-8 line 3014
[  698.339998] binder: 31457:31460 BC_INCREFS_DONE u0000000000000000 no match
[  698.354379] binder: 31454:31464 transaction failed 29189/-22, size 24-8 line 3014
[  698.359849] binder_alloc: 31458: binder_alloc_buf, no vma
[  698.359891] binder: 31458:31465 transaction failed 29189/-3, size 24-8 line 3137
[  698.401958] binder: 31468:31472 transaction failed 29189/-22, size 24-8 line 3014
[  698.472649] binder: 31482:31486 transaction failed 29189/-22, size 24-8 line 3014
[  698.500154] binder_alloc: 31485: binder_alloc_buf, no vma
[  698.500198] binder: 31485:31489 transaction failed 29189/-3, size 24-8 line 3137
[  698.501358] binder: 31487:31488 transaction failed 29189/-22, size 24-8 line 3014
[  698.581083] binder: 31499:31502 transaction failed 29189/-22, size 24-8 line 3014
[  698.581592] binder: 31494:31510 transaction failed 29189/-22, size 24-8 line 3014
[  698.581712] binder: 31494:31510 BC_INCREFS_DONE u0000000000000000 no match
[  698.604520] binder_alloc: 31505: binder_alloc_buf, no vma
[  698.604565] binder: 31505:31511 transaction failed 29189/-3, size 24-8 line 3137
[  698.606313] binder: 31503:31512 transaction failed 29189/-22, size 24-8 line 3014
[  698.679000] binder: 31518:31526 transaction failed 29189/-22, size 24-8 line 3014
[  698.688376] binder: 31514:31529 transaction failed 29189/-22, size 24-8 line 3014
[  698.690115] binder: 31514:31529 BC_INCREFS_DONE u0000000000000000 no match
[  698.709235] binder_alloc: 31530: binder_alloc_buf, no vma
[  698.709276] binder: 31530:31532 transaction failed 29189/-3, size 24-8 line 3137
[  698.741070] binder: 31513:31525 transaction failed 29189/-22, size 24-8 line 3014
[  698.780758] binder: 31542:31543 transaction failed 29189/-22, size 24-8 line 3014
[  698.786123] binder: 31538:31551 transaction failed 29189/-22, size 24-8 line 3014
[  698.786228] binder: 31538:31551 BC_INCREFS_DONE u0000000000000000 no match
[  698.836838] binder_alloc: 31548: binder_alloc_buf, no vma
[  698.836886] binder: 31548:31555 transaction failed 29189/-3, size 24-8 line 3137
[  698.853832] binder: 31553:31557 transaction failed 29189/-22, size 24-8 line 3014
[  698.928203] binder: 31573:31578 transaction failed 29189/-22, size 24-8 line 3014
[  698.928338] binder: 31573:31578 BC_INCREFS_DONE u0000000000000000 no match
[  698.957863] binder: 31583:31586 transaction failed 29189/-22, size 24-8 line 3014
[  698.961570] binder_alloc: 31575: binder_alloc_buf, no vma
[  698.961622] binder: 31575:31588 transaction failed 29189/-3, size 24-8 line 3137
[  698.966388] binder: 31563:31590 transaction failed 29189/-22, size 24-8 line 3014
[  699.053752] binder: 31594:31601 transaction failed 29189/-22, size 24-8 line 3014
[  699.056484] binder: 31603:31609 transaction failed 29189/-22, size 24-8 line 3014
[  699.057488] binder: 31602:31608 transaction failed 29189/-22, size 24-8 line 3014
[  699.057623] binder: 31602:31608 BC_INCREFS_DONE u0000000000000000 no match
[  699.108371] binder: 31610:31615 transaction failed 29189/-22, size 24-8 line 3014
[  699.151333] binder_alloc: 31624: binder_alloc_buf, no vma
[  699.151377] binder: 31624:31630 transaction failed 29189/-3, size 24-8 line 3137
[  699.152095] binder: 31622:31628 transaction failed 29189/-22, size 24-8 line 3014
[  699.152863] binder: 31621:31627 transaction failed 29189/-22, size 24-8 line 3014
[  699.156558] binder: 31622:31628 BC_INCREFS_DONE u0000000000000000 no match
[  699.227245] binder: 31631:31636 transaction failed 29189/-22, size 24-8 line 3014
[  699.239375] binder: 31634:31647 transaction failed 29189/-22, size 24-8 line 3014
[  699.253690] binder_alloc: 31641: binder_alloc_buf, no vma
[  699.253734] binder: 31641:31642 transaction failed 29189/-3, size 24-8 line 3137
[  699.300264] binder: 31643:31650 transaction failed 29189/-22, size 24-8 line 3014
[  699.300372] binder: 31643:31650 BC_INCREFS_DONE u0000000000000000 no match
[  699.335675] binder: 31649:31659 transaction failed 29189/-22, size 24-8 line 3014
[  699.385939] binder_alloc: 31661: binder_alloc_buf, no vma
[  699.385985] binder: 31661:31662 transaction failed 29189/-3, size 24-8 line 3137
[  699.479054] binder: 31670:31686 transaction failed 29189/-22, size 24-8 line 3014
[  699.482851] binder: 31672:31683 transaction failed 29189/-22, size 24-8 line 3014
[  699.483314] binder: 31672:31683 BC_INCREFS_DONE u0000000000000000 no match
[  699.487452] binder_alloc: 31679: binder_alloc_buf, no vma
[  699.487492] binder: 31679:31688 transaction failed 29189/-3, size 24-8 line 3137
[  699.504434] binder: 31667:31681 transaction failed 29189/-22, size 24-8 line 3014
[  699.569738] binder: 31699:31702 transaction failed 29189/-22, size 24-8 line 3014
[  699.569861] binder: 31699:31702 BC_INCREFS_DONE u0000000000000000 no match
[  699.587712] binder_alloc: 31697: binder_alloc_buf, no vma
[  699.587755] binder: 31697:31703 transaction failed 29189/-3, size 24-8 line 3137
[  699.608647] binder: 31707:31711 transaction failed 29189/-22, size 24-8 line 3014
[  699.628112] binder: 31710:31714 transaction failed 29189/-22, size 24-8 line 3014
[  699.644182] binder_alloc: 31722: binder_alloc_buf, no vma
[  699.644225] binder: 31722:31724 transaction failed 29189/-3, size 24-8 line 3137
[  699.679351] binder: 31727:31731 transaction failed 29189/-22, size 24-8 line 3014
[  699.685559] binder_alloc: 31725: binder_alloc_buf, no vma
[  699.685614] binder: 31725:31733 transaction failed 29189/-3, size 24-8 line 3137
[  699.690007] binder: 31730:31735 transaction failed 29189/-22, size 24-8 line 3014
[  699.690185] binder: 31729:31734 transaction failed 29189/-22, size 24-8 line 3014
[  699.691934] binder: 31730:31735 BC_INCREFS_DONE u0000000000000000 no match
[  699.757614] binder_alloc: 31744: binder_alloc_buf, no vma
[  699.757660] binder: 31744:31747 transaction failed 29189/-3, size 24-8 line 3137
[  699.764715] binder: 31746:31748 transaction failed 29189/-22, size 24-8 line 3014
[  699.764840] binder: 31746:31748 BC_INCREFS_DONE u0000000000000000 no match
[  699.791506] binder: 31745:31751 transaction failed 29189/-22, size 24-8 line 3014
[  699.873946] binder: 31758:31762 transaction failed 29189/-22, size 24-8 line 3014
[  699.875272] binder: 31761:31768 transaction failed 29189/-22, size 24-8 line 3014
[  699.918807] binder_alloc: 31757: binder_alloc_buf, no vma
[  699.918851] binder: 31757:31780 transaction failed 29189/-3, size 24-8 line 3137
[  699.958742] binder: 31774:31776 transaction failed 29189/-22, size 24-8 line 3014
[  699.966487] binder: 31774:31776 BC_INCREFS_DONE u0000000000000000 no match
[  699.969230] binder: 31781:31788 transaction failed 29189/-22, size 24-8 line 3014
[  700.036917] binder: 31799:31806 transaction failed 29189/-22, size 24-8 line 3014
[  700.042500] binder: 31787:31791 transaction failed 29189/-22, size 24-8 line 3014
[  700.044381] binder: 31805:31810 transaction failed 29189/-22, size 24-8 line 3014
[  700.044505] binder: 31805:31810 BC_INCREFS_DONE u0000000000000000 no match
[  700.048534] binder: 31795:31813 transaction failed 29189/-22, size 24-8 line 3014
[  700.118473] binder_alloc: 31821: binder_alloc_buf, no vma
[  700.118518] binder: 31821:31825 transaction failed 29189/-3, size 24-8 line 3137
[  700.162307] binder: 31819:31820 transaction failed 29189/-22, size 24-8 line 3014
[  700.162417] binder: 31819:31820 BC_INCREFS_DONE u0000000000000000 no match
[  700.166377] binder: 31833:31836 transaction failed 29189/-22, size 24-8 line 3014
[  700.183645] binder_alloc: 31828: binder_alloc_buf, no vma
[  700.183688] binder: 31828:31837 transaction failed 29189/-3, size 24-8 line 3137
[  700.193798] binder: 31832:31838 transaction failed 29189/-22, size 24-8 line 3014
[  700.295570] binder: 31864:31867 transaction failed 29189/-22, size 24-8 line 3014
[  700.307174] binder: 31862:31865 transaction failed 29189/-22, size 24-8 line 3014
[  700.310890] binder: 31858:31868 transaction failed 29189/-22, size 24-8 line 3014
[  700.311023] binder: 31858:31868 BC_INCREFS_DONE u0000000000000000 no match
[  700.325547] binder_alloc: 31861: binder_alloc_buf, no vma
[  700.325602] binder: 31861:31872 transaction failed 29189/-3, size 24-8 line 3137
[  700.403196] binder: 31875:31881 transaction failed 29189/-22, size 24-8 line 3014
[  700.427756] binder: 31878:31888 transaction failed 29189/-22, size 24-8 line 3014
[  700.431185] binder: 31884:31889 transaction failed 29189/-22, size 24-8 line 3014
[  700.431953] binder: 31884:31889 BC_INCREFS_DONE u0000000000000000 no match
[  700.479622] binder: 31896:31898 transaction failed 29189/-22, size 24-8 line 3014
[  700.494240] binder_alloc: 31891: binder_alloc_buf, no vma
[  700.494286] binder: 31891:31895 transaction failed 29189/-3, size 24-8 line 3137
[  700.556010] binder: 31901:31907 transaction failed 29189/-22, size 24-8 line 3014
[  700.556139] binder: 31901:31907 BC_INCREFS_DONE u0000000000000000 no match
[  700.569888] binder: 31902:31912 transaction failed 29189/-22, size 24-8 line 3014
[  700.575170] binder: 31908:31918 transaction failed 29189/-22, size 24-8 line 3014
[  700.603470] binder_alloc: 31911: binder_alloc_buf, no vma
[  700.603515] binder: 31911:31921 transaction failed 29189/-3, size 24-8 line 3137
[  700.984503] binder: 31929:31931 transaction failed 29189/-22, size 24-8 line 3014
[  701.029560] binder: 31940:31946 transaction failed 29189/-22, size 24-8 line 3014
[  701.041274] binder_alloc: 31938: binder_alloc_buf, no vma
[  701.041316] binder: 31938:31948 transaction failed 29189/-3, size 24-8 line 3137
[  701.042193] binder_alloc: 31938: binder_alloc_buf, no vma
[  701.042238] binder: 31932:31942 transaction failed 29189/-3, size 24-8 line 3137
[  701.042354] binder: 31932:31942 BC_INCREFS_DONE u0000000000000000 no match
[  701.086642] binder: 31936:31958 transaction failed 29189/-22, size 24-8 line 3014
[  701.129445] binder: 31954:31959 transaction failed 29189/-22, size 24-8 line 3014
[  701.129552] binder: 31954:31959 BC_INCREFS_DONE u0000000000000000 no match
[  701.139725] binder: 31956:31960 transaction failed 29189/-22, size 24-8 line 3014
[  701.161816] binder: 31968:31972 transaction failed 29189/-22, size 24-8 line 3014
[  701.164155] binder: 31971:31973 transaction failed 29189/-22, size 24-8 line 3014
[  701.165238] binder: 31971:31973 BC_INCREFS_DONE u0000000000000000 no match
[  701.167569] binder_alloc: 31965: binder_alloc_buf, no vma
[  701.167621] binder: 31965:31977 transaction failed 29189/-3, size 24-8 line 3137
[  701.247866] binder_alloc: 31985: binder_alloc_buf, no vma
[  701.247912] binder: 31985:31993 transaction failed 29189/-3, size 24-8 line 3137
[  701.273811] binder: 31988:31998 transaction failed 29189/-22, size 24-8 line 3014
[  701.292290] binder: 31997:32003 transaction failed 29189/-22, size 24-8 line 3014
[  701.339180] binder: 31996:31999 transaction failed 29189/-22, size 24-8 line 3014
[  701.339303] binder: 31996:31999 BC_INCREFS_DONE u0000000000000000 no match
[  701.352421] binder_alloc: 32008: binder_alloc_buf, no vma
[  701.352466] binder: 32008:32020 transaction failed 29189/-3, size 24-8 line 3137
[  701.401279] binder: 32019:32021 transaction failed 29189/-22, size 24-8 line 3014
[  701.432379] binder: 32022:32031 transaction failed 29189/-22, size 24-8 line 3014
[  701.447476] binder: 32030:32032 transaction failed 29189/-22, size 24-8 line 3014
[  701.447597] binder: 32030:32032 BC_INCREFS_DONE u0000000000000000 no match
[  701.541649] binder_alloc: 32038: binder_alloc_buf, no vma
[  701.548240] binder: 32038:32047 transaction failed 29189/-3, size 24-8 line 3137
[  701.582364] binder: 32056:32060 transaction failed 29189/-22, size 24-8 line 3014
[  701.593062] binder: 32054:32055 transaction failed 29189/-22, size 24-8 line 3014
[  701.621099] binder: 32046:32052 transaction failed 29189/-22, size 24-8 line 3014
[  701.621207] binder: 32046:32052 BC_INCREFS_DONE u0000000000000000 no match
[  701.643414] binder_alloc: 32067: binder_alloc_buf, no vma
[  701.643457] binder: 32067:32070 transaction failed 29189/-3, size 24-8 line 3137
[  701.674717] binder: 32073:32079 transaction failed 29189/-22, size 24-8 line 3014
[  701.682255] binder: 32077:32083 transaction failed 29189/-22, size 24-8 line 3014
[  701.729261] binder: 32086:32090 transaction failed 29189/-22, size 24-8 line 3014
[  701.729420] binder: 32086:32090 BC_INCREFS_DONE u0000000000000000 no match
[  701.740804] binder: 32091:32094 transaction failed 29189/-22, size 24-8 line 3014
[  701.765297] binder: 32095:32097 transaction failed 29189/-22, size 24-8 line 3014
[  701.815800] binder_alloc: 32103: binder_alloc_buf, no vma
[  701.815849] binder: 32103:32106 transaction failed 29189/-3, size 24-8 line 3137
[  701.825485] INFO: task init:25170 blocked for more than 140 seconds.
[  701.825490]       Not tainted 4.4.174+ #4
[  701.825493] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  701.825518] init            D ffff880080517718 29280 25170      1 0x00000000
[  701.825530]  ffff880080517718 ffff88007aabaf80 a431fa5827a5de41 ffff88007aabaf80
[  701.825538]  0000000000000000 ffff88007aabb800 ffff8801db71f180 ffff8801db71f1a8
[  701.825546]  ffff8801db71e898 ffff8800b76e0000 ffff88007aabaf80 ffffed00100a2001
[  701.825548] Call Trace:
[  701.825564]  [<ffffffff82709b79>] schedule+0x99/0x1d0
[  701.825573]  [<ffffffff8270a333>] schedule_preempt_disabled+0x13/0x20
[  701.825581]  [<ffffffff8270c492>] mutex_lock_nested+0x3c2/0xb80
[  701.825601]  [<ffffffff81c8b2aa>] ? tty_open+0x56a/0xf50
[  701.825608]  [<ffffffff81b0ab03>] ? assoc_array_gc+0x1233/0x12e0
[  701.825615]  [<ffffffff8270c0d0>] ? mutex_trylock+0x500/0x500
[  701.825624]  [<ffffffff814801a3>] ? kmem_cache_alloc_trace+0x123/0x2d0
[  701.825631]  [<ffffffff81c8b2aa>] tty_open+0x56a/0xf50
[  701.825639]  [<ffffffff81c8ad40>] ? tty_init_dev+0x420/0x420
[  701.825647]  [<ffffffff814a3d5a>] ? chrdev_open+0xca/0x630
[  701.825655]  [<ffffffff81c8ad40>] ? tty_init_dev+0x420/0x420
[  701.825662]  [<ffffffff814a3ec0>] chrdev_open+0x230/0x630
[  701.825669]  [<ffffffff814a3c90>] ? cdev_put.part.0+0x50/0x50
[  701.825679]  [<ffffffff8149154f>] do_dentry_open+0x38f/0xbd0
[  701.825687]  [<ffffffff814b6d8e>] ? __inode_permission2+0x9e/0x250
[  701.825694]  [<ffffffff814a3c90>] ? cdev_put.part.0+0x50/0x50
[  701.825702]  [<ffffffff81494d3b>] vfs_open+0x10b/0x210
[  701.825709]  [<ffffffff814c4947>] ? may_open.isra.0+0xe7/0x210
[  701.825715]  [<ffffffff814c5ddf>] path_openat+0x136f/0x4470
[  701.825721]  [<ffffffff81483f86>] ? kasan_kmalloc.part.0+0xc6/0xf0
[  701.825729]  [<ffffffff814c4a70>] ? may_open.isra.0+0x210/0x210
[  701.825738]  [<ffffffff811ff5b0>] ? trace_hardirqs_on+0x10/0x10
[  701.825745]  [<ffffffff814ccab1>] do_filp_open+0x1a1/0x270
[  701.825752]  [<ffffffff814ca46c>] ? getname_flags+0xcc/0x550
[  701.825760]  [<ffffffff814cc910>] ? user_path_mountpoint_at+0x50/0x50
[  701.825769]  [<ffffffff814f32ea>] ? __alloc_fd+0x1ea/0x490
[  701.825776]  [<ffffffff82717f6d>] ? _raw_spin_unlock+0x2d/0x50
[  701.825783]  [<ffffffff81495668>] do_sys_open+0x2f8/0x600
[  701.825789]  [<ffffffff81495370>] ? filp_open+0x70/0x70
[  701.825797]  [<ffffffff811ff385>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  701.825804]  [<ffffffff8149599d>] SyS_open+0x2d/0x40
[  701.825811]  [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
[  701.825817] 1 lock held by init/25170:
[  701.825834]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81c8b2aa>] tty_open+0x56a/0xf50
[  701.825839] Sending NMI to all CPUs:
[  701.827140] NMI backtrace for cpu 0
[  701.827144] CPU: 0 PID: 32096 Comm: blkid Not tainted 4.4.174+ #4
[  701.827147] task: ffff88006f68af80 task.stack: ffff880067df0000
[  701.827151] RIP: 0010:[<ffffffff814e3dbd>]  [<ffffffff814e3dbd>] __d_alloc+0x47d/0x7b0
[  701.827153] RSP: 0018:ffff880067df78f0  EFLAGS: 00000246
[  701.827157] RAX: dffffc0000000000 RBX: ffff8800b8649de0 RCX: 0000000000000000
[  701.827160] RDX: 1ffff100170c93be RSI: ffffffff8289cf20 RDI: ffff8800b8649df0
[  701.827164] RBP: ffff880067df7928 R08: ffffffff82fb8bc0 R09: ffffed00170c93aa
[  701.827167] R10: ffffed00170c93a9 R11: ffff8800b8649d48 R12: ffff8800b8649ce8
[  701.827170] R13: ffff880067df7c04 R14: ffff8800b8649ce0 R15: 00000000e6963cc1
[  701.827173] FS:  00007f09fa820740(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
[  701.827175] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  701.827178] CR2: 00007f09fa400000 CR3: 00000000672ca000 CR4: 00000000001606b0
[  701.827180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  701.827183] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  701.827184] Stack:
[  701.827187]  0000000000000000 ffff8801d76a3300 ffff8800b85cc160 ffff880067df7c00
[  701.827190]  ffff8800b85cc160 ffff880067df7c00 0000000000000001 ffff880067df7968
[  701.827193]  ffffffff814e413d ffffffff814e57d9 ffff880067df79d8 0000000000000000
[  701.827195] Call Trace:
[  701.827197]  [<ffffffff814e413d>] d_alloc+0x4d/0x270
[  701.827200]  [<ffffffff814e57d9>] ? d_lookup+0xc9/0x110
[  701.827202]  [<ffffffff814c085c>] lookup_dcache+0x13c/0x1e0
[  701.827205]  [<ffffffff814c0981>] __lookup_hash+0x81/0x100
[  701.827207]  [<ffffffff814c0900>] ? lookup_dcache+0x1e0/0x1e0
[  701.827210]  [<ffffffff8160af00>] ? kernfs_iop_getattr+0xb0/0xb0
[  701.827213]  [<ffffffff814b6d8e>] ? __inode_permission2+0x9e/0x250
[  701.827216]  [<ffffffff814c12eb>] walk_component+0x8eb/0x1000
[  701.827219]  [<ffffffff814c0a00>] ? __lookup_hash+0x100/0x100
[  701.827222]  [<ffffffff814c1a00>] ? walk_component+0x1000/0x1000
[  701.827225]  [<ffffffff8148535a>] ? quarantine_put+0xda/0x180
[  701.827228]  [<ffffffff811ff385>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  701.827231]  [<ffffffff814c3f5f>] path_lookupat.isra.0+0x18f/0x3f0
[  701.827235]  [<ffffffff814cae94>] filename_lookup+0x1a4/0x3b0
[  701.827238]  [<ffffffff8148157e>] ? kmem_cache_free+0xbe/0x350
[  701.827241]  [<ffffffff814cacf0>] ? filename_parentat.isra.0+0x3e0/0x3e0
[  701.827244]  [<ffffffff8123a761>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  701.827248]  [<ffffffff8148ad12>] ? __check_object_size+0x222/0x332
[  701.827251]  [<ffffffff81b464be>] ? strncpy_from_user+0x18e/0x230
[  701.827254]  [<ffffffff814ca5d2>] ? getname_flags+0x232/0x550
[  701.827257]  [<ffffffff814cb1f3>] user_path_at_empty+0x43/0x50
[  701.827260]  [<ffffffff814a52e6>] vfs_fstatat+0xc6/0x170
[  701.827263]  [<ffffffff814a5220>] ? vfs_fstat+0x70/0x70
[  701.827266]  [<ffffffff81481784>] ? kmem_cache_free+0x2c4/0x350
[  701.827269]  [<ffffffff814ca360>] ? putname+0xe0/0x120
[  701.827271]  [<ffffffff814a670d>] SyS_newfstatat+0x9d/0x110
[  701.827274]  [<ffffffff814a6670>] ? SyS_newlstat+0x110/0x110
[  701.827277]  [<ffffffff81495370>] ? filp_open+0x70/0x70
[  701.827280]  [<ffffffff82719755>] ? retint_user+0x18/0x3c
[  701.827283]  [<ffffffff811ff385>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  701.827287]  [<ffffffff810021a4>] ? lockdep_sys_exit_thunk+0x12/0x14
[  701.827290]  [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
[  701.827297] Code: 02 00 0f 85 a3 02 00 00 49 8d be 10 01 00 00 49 89 9e 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 84 02 00 00 49 8d be 18 01 00 00 48 b8 00 00 00 00 00 fc 
[  701.827300] NMI backtrace for cpu 1
[  701.827303] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4
[  701.827306] task: ffff8801da6c2f80 task.stack: ffff8800001d0000
[  701.827310] RIP: 0010:[<ffffffff8109b617>]  [<ffffffff8109b617>] flat_send_IPI_mask+0xf7/0x1b0
[  701.827312] RSP: 0018:ffff8800001d7c88  EFLAGS: 00000046
[  701.827316] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000
[  701.827319] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300
[  701.827323] RBP: ffff8800001d7cb8 R08: 0000000000000018 R09: 0000000000000000
[  701.827326] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246
[  701.827330] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002
[  701.827333] FS:  0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
[  701.827336] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  701.827340] CR2: 0000000000758040 CR3: 000000017ec3d000 CR4: 00000000001606b0
[  701.827343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  701.827347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  701.827349] Stack:
[  701.827352]  0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34
[  701.827356]  000000000001b6c0 0000000000000008 ffff8800001d7cd8 ffffffff81092bee
[  701.827359]  0000000000000008 ffffffff82924260 ffff8800001d7d30 ffffffff81ab8252
[  701.827361] Call Trace:
[  701.827365]  [<ffffffff81092bee>] nmi_raise_cpu_backtrace+0x5e/0x80
[  701.827368]  [<ffffffff81ab8252>] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae
[  701.827371]  [<ffffffff813ab1a4>] ? print_lock+0xa8/0xab
[  701.827374]  [<ffffffff81092b90>] ? irq_force_complete_move+0x330/0x330
[  701.827378]  [<ffffffff81092ca4>] arch_trigger_all_cpu_backtrace+0x14/0x20
[  701.827381]  [<ffffffff813b4762>] watchdog.cold+0xd3/0xee
[  701.827384]  [<ffffffff81309de5>] ? watchdog+0x2a5/0xa00
[  701.827387]  [<ffffffff81309b40>] ? reset_hung_task_detector+0x20/0x20
[  701.827390]  [<ffffffff811342c3>] kthread+0x273/0x310
[  701.827393]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  701.827396]  [<ffffffff82718079>] ? _raw_spin_unlock_irq+0x39/0x60
[  701.827399]  [<ffffffff81159431>] ? finish_task_switch+0x1e1/0x660
[  701.827403]  [<ffffffff81159403>] ? finish_task_switch+0x1b3/0x660
[  701.827406]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  701.827408]  [<ffffffff827081f3>] ? __schedule+0x7a3/0x1ee0
[  701.827411]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  701.827415]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  701.827418]  [<ffffffff82718fc5>] ret_from_fork+0x55/0x80
[  701.827421]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  701.827428] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 
[  701.828000] Kernel panic - not syncing: hung_task: blocked tasks
[  701.828010] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4
[  701.828021]  0000000000000000 5e65e300df7234f4 ffff8800001d7c60 ffffffff81aad1a1
[  701.828030]  ffff88007aabaf80 ffffffff82872120 dffffc0000000000 0000000000000002
[  701.828039]  00000000003fe9e7 ffff8800001d7d40 ffffffff813a48c2 0000000041b58ab3
[  701.828041] Call Trace:
[  701.828055]  [<ffffffff81aad1a1>] dump_stack+0xc1/0x120
[  701.828066]  [<ffffffff813a48c2>] panic+0x1b9/0x37b
[  701.828073]  [<ffffffff813a4709>] ? add_taint.cold+0x16/0x16
[  701.828083]  [<ffffffff81ab8061>] ? nmi_trigger_all_cpu_backtrace+0x3e1/0x490
[  701.828090]  [<ffffffff81ab8046>] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490
[  701.828099]  [<ffffffff81ab8046>] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490
[  701.828108]  [<ffffffff813b4773>] watchdog.cold+0xe4/0xee
[  701.828117]  [<ffffffff81309de5>] ? watchdog+0x2a5/0xa00
[  701.828125]  [<ffffffff81309b40>] ? reset_hung_task_detector+0x20/0x20
[  701.828136]  [<ffffffff811342c3>] kthread+0x273/0x310
[  701.828144]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  701.828152]  [<ffffffff82718079>] ? _raw_spin_unlock_irq+0x39/0x60
[  701.828160]  [<ffffffff81159431>] ? finish_task_switch+0x1e1/0x660
[  701.828167]  [<ffffffff81159403>] ? finish_task_switch+0x1b3/0x660
[  701.828175]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  701.828183]  [<ffffffff827081f3>] ? __schedule+0x7a3/0x1ee0
[  701.828190]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  701.828198]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  701.828206]  [<ffffffff82718fc5>] ret_from_fork+0x55/0x80
[  701.828214]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  701.828741] Kernel Offset: disabled
[  713.571655] Rebooting in 86400 seconds..