NY=[@ANYRESOCT=r0, @ANYRESOCT=r0], @ANYRES32=r0, @ANYRES16, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="22eec83797d4342ca0dc6de57c5a34c92ac46c615160279bb43566bac831bd62b028034423b3a3093f09d3ea626a1edc9ee9e291f48d7ae187285eafc22b92c2fe46cf938f0b35b1fc636af2b7696d91cfd40060bcfd01b23dbae410931d3968dcba55c8b486f313156a7776f9c551a44a95b59cbc6fc0aae94a78359e7c30feb0f805d638a055e92e3bb9c1a05bd1d8820975011c39c5", @ANYPTR64, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0], @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES32=r0]], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) 18:33:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xa802bc64e1f79776, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'yam0\x00', 0x79d9}) 18:33:19 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)=""/103) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b1fdcc0d1ad6b10eaf8ea21c5d84e247d88f587415babd14515d5514fd01d2087cadb5aacf10570b9d8491a718b6043daa8329e94ac1a41070011f61691226724b44ca7ad4a936b81fedf3e4f5d897d151a589df7d39a78c8bd9471af520e1908c37c662075f956ae188f152ab1232d5a29beb680954f5dfc892233cfab9e20f7af87c40bd0850fff2fd1cf511d4d51c28e1d8", 0x93}, {&(0x7f0000000200)="dbee6ad2ab9ec3352254f1542c0e38d3dfa2dcdd283e0dd670458f68e5aa9b25fac4696aab0d23bf1c55a94ad8b1a94b352f831c00ad23b90d2b0b0f6c2e7252451a73d8315ef28689413292190a825bb30afa4ede879005837e1b4c4fdab4f3f92d6c69e24df0756c3f499b7db89bac104afa1b632135f287150866c7ea4fad756273bfe22225f2", 0xfffffedd}, {&(0x7f0000000540)="52bd390c6f1bd946cbfe66743f259f6d7a6df54d8fea741bdb1479876d775079fbfabda183ae8e3827a4e9f9d2284126dff93b3e9e42aa4bb24a387a4a1b3dde3b787493a2895d425143df78f3af62ed7f8c26284b39ceabbd684a975b1495261d0092df8aec8b4711f732ee8a480f29ee3ed1b86fa072edbb35b3ca450076f896c755271f5206b3d733fcfeebd1d789580ff43ff5358fcbdf224cf1b1e0af4e63534715ba0199ad4bfba09b9da1a37d07f99adc3b0d347653b08fb9596a0a8f76012397dfe314ee7339ee5bf439c7fc17a2ac28bbc490c54f1692", 0xdb}, {&(0x7f0000000500)="99e893c2499f059844c222069ebcb120568ac2d01c35ccabc0", 0x19}], 0x4) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10634e05c670be6a65085fa2"], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) [ 970.093036] binder: 14139:14141 transaction failed 29201/-28, size 0-0 line 3255 [ 970.224259] binder: 14160:14168 transaction failed 29201/-28, size 0-0 line 3255 18:33:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000011dd3e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:19 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x20000, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 970.224279] binder: 14160:14168 ioctl c0306201 20000440 returned -14 [ 970.258027] binder: 14163:14170 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:19 executing program 0: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x6, 0x5, 0x4, 0x4, 0x146}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000f500000000000000000000000000000000008fdf28fb1fe1cc0663610000000000000000000000653df66fa8db571390e800ac1a7c574742abeecfc11669581272b7b60b680336e9b94f63d0afe0c07fccadfd804449fd66dde3060c33b1c177fe83d11b5c7cf1fdf0c35757467ba65681aa6ef096664c0d"], 0x0, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) 18:33:19 executing program 5: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) 18:33:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 970.303404] binder: 14172:14179 transaction failed 29201/-28, size 8204571970198317687-0 line 3255 18:33:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:19 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)=0x0) r3 = geteuid() r4 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001480)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r7 = getegid() sendmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000140)="900111446239fd15cc3917a0e15262a9607b3c1e76c071709391518c86eb2340dbd68a5b80cea831d47cd356d4f1f1f1b3e23e24e7b2d0b09873158f8e208b16533805048a257c01af3b66541cc0f7cde418d23dfb425dc5b3fbe3e4ea92cb4828d91098fb3a60abe18d67d32294aa79959772b12fdcadd669d3d1f6bb37f0f12288f7f23b91e426b1b3772ab3142593e50523e2c8ded52a969303e4703c0e45883c76ab1617fb163f49b372ddb0e700db8da500205b6dc5a702baec11ca267f68f4e4d7704de60a9d0f26466b1ca5f05f5239b507eb03a95f72239c960665cfb783d12f4ea4", 0xe6}, {&(0x7f0000000240)="e6e489f3c2732cd5909982bbb4a290299e5975b283a6253115cda957279cc56d30a16adc7442696f52cc8df2585cf4dd7f64c32006fadf6759c7aab4e4961569573b674fb5d6ef1e9187db11639eaedc0c48868df43551", 0x57}], 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="f8ffffff20000000000000004de2e901000000023b", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4}, 0x800) [ 970.333944] binder: 14172:14184 transaction failed 29201/-28, size 8204571970198317687-0 line 3255 18:33:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00610000001c4000000000000000000000ff010000008fdf28fb9f092dcfe400001e0000eaffff0000000000"], 0x0, 0x0, 0x0}) 18:33:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400000005d0010000000"], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 970.340414] binder: 14182:14187 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1400000000000000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = dup3(r0, r0, 0x7fffc) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x107, 0x1000) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 18:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 5: openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="680002000000000000000000000000"], 0x49, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000000c0)) ioctl$VT_RELDISP(r1, 0x5605) 18:33:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) clock_adjtime(0x7, &(0x7f0000000200)={0x400, 0x40, 0x3, 0x400, 0x7, 0x2, 0x5, 0x1000, 0x7, 0x361, 0xc4, 0x8, 0x94, 0x2, 0x1, 0x5, 0x200, 0x2, 0x906, 0x5, 0xe4e, 0x5, 0x1000, 0x40, 0x5, 0x10001}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x34) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 970.351490] binder: 14182:14189 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 970.368377] binder: 14186:14190 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f0000000000)=ANY=[], 0x2b3, 0x0, 0x0}) 18:33:20 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x111) read(r0, &(0x7f0000000040)=""/57, 0x39) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000129520f962e739f6b01e363e5373f3d090000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1063084045f7d54980d5ab353dced7d0b6169392a5"], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) 18:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 970.394372] binder: 14193:14197 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x70, 0x4, 0x3}, 0x8fbc}}, 0x18) 18:33:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'ip6erspan0\x00', {0x2, 0x4e22, @loopback}}) 18:33:20 executing program 1: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0xf411885eefad3d31, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xe, 0x400) epoll_create1(0x80000) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008700000000000cb4e3000000006ef62eccacbf2789b8dda429a9df6703700278103dbbb70cd5520f1ae91b98ebf7f7aece38f814cc44d42430364c0000000000000000"], 0x0, 0x0, 0x0}) [ 970.450440] binder: 14200:14206 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 970.452645] binder: 14200:14206 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r2, 0x329, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) dup(r0) 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x400401, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xf, 0x6}) [ 970.488017] binder: 14212:14216 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140), 0x10) 18:33:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000ffff0000000000008fdf28fb9fea35cff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x101000, 0x0) dup3(r1, r0, 0x80000) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x10) [ 970.566952] binder: 14222:14228 transaction failed 29201/-28, size 0-0 line 3255 [ 970.583145] binder: 14226:14229 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10e8f455d1832b1d646e29b3bd630840"], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x0, 0x2, 0x1}}, 0x14) 18:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x48000000000000, 0x105801) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080)=0x3f, 0x4) [ 970.584641] binder: 14226:14229 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 970.599493] binder: 14222:14228 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040ff000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff27622b9797f6d97b0cd31f22a9b389746afd68aca8159c1b7a516ee8c138d06b2f4a4ab909c579210d9b5a7357f5f90d1cab33cb7dae0a77f601b7953a8a3ca236b23cfb614beea23d2f471104a45a01f6e0be220005e8d6c13cbaa693888a0847fec9454583eab3714cedc59ab724da599a925ff0cf9485e80b1947731fbd3219b881900a4115d1d36b9b0e"], 0x0, 0x0, 0x0}) 18:33:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0xe9) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000200)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="106308400000d4d700000000af20efeac952a01826d849c56cfb0e02c11478a9d884"], 0x5b, 0x0, &(0x7f0000000140)="f00ba21211d62a51c628264e6e254cb7891a7f4915311c5206974cd0b2c34b41e6951b2ce56a52a7be4f15f393995dd90ca5a98b47b5df37700a1b53430fc9cfdaede648a7eda89e3e8b0eeb616023a82f40b32114f45f2f532770"}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) 18:33:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus', [{}], 0xa, "e661647007e82fa4bd596ac31467decc0f76fda761e9614b51f04c616410f08b26f60c9cf3e1f81fc6b09cec36704f376107cdbba60929303522d2e12c5203b7e052a1489c6f4fbdbeb1875b75465a29dcf584405f8afe135dfd48fdaa7bec671aaece833424ee7f411a31d3b854683825f9"}, 0x7c) r3 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000c80)=0xe8) fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d40)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000e40)=0xe8) getresgid(&(0x7f0000000e80), &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f80)={0x0, r0, 0x0, 0xb, &(0x7f0000000f40)='cpusetGPL,\x00', 0xffffffffffffffff}, 0x30) r10 = getuid() getresgid(&(0x7f0000000fc0), &(0x7f0000001000)=0x0, &(0x7f0000001040)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001080)=0x0) fstat(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001140)='./bus\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001200)=0x0) r16 = geteuid() getresgid(&(0x7f0000001240), &(0x7f0000001280)=0x0, &(0x7f00000012c0)) r18 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000017c0)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000018c0)=0xe8) getresgid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) fcntl$getownex(r0, 0x10, &(0x7f00000030c0)={0x0, 0x0}) r22 = getuid() r23 = getgid() r24 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000031c0)={0x0, 0x0, 0x0}, &(0x7f0000003200)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000035c0)={0x0, r0, 0x0, 0x3, &(0x7f0000003580)='#! ', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003600)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000003700)=0xe8) fstat(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000037c0)=0x0) r31 = geteuid() fstat(r0, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getpid() r34 = geteuid() r35 = getgid() r36 = getpgid(0xffffffffffffffff) r37 = getuid() stat(&(0x7f0000003880)='./bus\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003980)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000003940)='%\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000039c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000003ac0)=0xe8) getresgid(&(0x7f0000004040)=0x0, &(0x7f0000004000), &(0x7f00000040c0)) r42 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003bc0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000003cc0)=0xe8) getgroups(0x1, &(0x7f0000003d00)=[0xee00]) sendmmsg$unix(r1, &(0x7f0000003e80)=[{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="fed59a729ce1debf380511d78b2bf11e79dcc81b7c0b41cad62c643f7353afc24331862c9b5fdf2f7f553a4b652047bb6032af306be5267a449569e946328d541f1aa35563ea74e61da968fb2c312c1977e6261d5b63ce4735030773c5b522095b2c259f77fc39e2f0bb75be852839610ce7ce7eb7d1b5", 0x77}, {&(0x7f0000000400)="ba0d6b7e515f33d469d183878587fc675e525afa0c93e3bfa7b1a6baf37621c83a31cb3c3045d3e02d84ba8d5993c83590459699584e950570aff99cdc12620458112552f526f3759378eeefda3d3bf0d9fc23d3245ea66ac43512fdf3f1a4ede1cf730f75e7e30d07fe0e267feab671656e3952fc9d63ab528b39d13c8f081fa1596408451db62d634b579b0ca4bcb3dd41bf93d7099564825563d7a0e96662c871e23523ce71270b68a645605653386624fe74c1973bc371e3b1e412b1e182d843afc24f481a5f8087e9d7d2a8027a7845264aa7705f785f1e22b7b78c83fd2bfed871c19b96b0de376e3f1525", 0xee}, {&(0x7f0000000180)="b435cd48dc7e15681dededd013", 0xd}, {&(0x7f0000000500)="63152cbd4495a262ef1dd8ebda2ae8ca1886d02b640e86bed6325c7f6990afa6ca46479493421b28268cc8ddf34c", 0x2e}, {&(0x7f0000000540)="042fde848719f8376d3070feaac976c0d9b70da5d853635f5e5e4bac66a17e738f71879599d9d6f8e8f6d80ae2f94a43bf383a022ab5e0c1dc73e6553cf5de2d30d72066730a03139a020778097c21025b6fc24bd4c5b22047dfdb65c03d41743a915a49d597800494f40b5b627a64649c35d9323371590796c3629ffcc360106e8cb110368bd6d9ecdb6a4ed5955397f7b6c829d061bc3d35bca4a8c65f4e90c0339334", 0xa4}, {&(0x7f0000000600)}, {&(0x7f0000000640)="be6b57c6f9e23d61c1a645f9ebfc000077f09295d4b629c9903b775ecc5a42b00aeb514e898107e58f8b0e0541047dcd1c50692f7f93845ce81d7645d2ced443532f7094d2114b1325", 0x49}, {&(0x7f00000006c0)="dc22c0a6439c13f8aad3fc72610c7a683983895a1013f753a46d5a26393ab0adb96f33a61261b91f87fbe91318198da7d21a3114858f9b20aeeaf1e1d0bb6a02ab5a806d7dd471414ba43ecccc1ec2d166867cd0ea081d7727aa6a611cf347a08fbda1f396cfad9ac2b79cb3be57504475abbd23f23e6a184f67c630b84dbf69106ef46f32464c3b768737c093809cf8a66b0489b4068ddd92d31fe474941d3d89e5ff6bc520bf3b048ce9f3532cd523edf5", 0xb2}], 0x8, 0x0, 0x0, 0x8000}, {&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)="c84e4ed3a0e9dd525a06", 0xa}, {&(0x7f00000008c0)="97016382c672a0a2065e24b87388f6c87ccb4f7fe8f3e88f7efed241722e55d3a4027df6cdbba5a6ec55aae8d9f85cf38384c3ded0ffd97833c7993ef68245be0ef7bd58a0a8c39e80fb5d0507", 0x4d}, {&(0x7f0000000940)="03b84f19cba65d03b90895e8839d28a657aebcef96eff31cefb078653934bb1c45df4228d8ddb6ffd60d84180c91ecd35f0e39eaf8f34f5ac43639c51c2bd948e5a40d3fd7fcee12f24098235a9c6ea95996abb3a4d40a09cf59dfe98bdfd84ec651279661f865cc791540967f36c072c3be357dba83dfeadef0fc6b0bc3ab3f4ae79f215124e806e3ce9de03d60fbac3e27f1874334d5ead70cea09dbf444f44f27", 0xa2}, {&(0x7f0000000a00)="4bbc3f8450f58298a4ee4f489fc863cfe4113540e6a0b36a74439d5dcd8c3a5cb24e0bf1dbf3774f6a3ebef24c2d0cbc1eaf8c37455d21d23362e907886ded8fea046412431ca3cb175a1e", 0x4b}, {&(0x7f0000000a80)="aedad0ff5168c65c6ef51f4cd5fa855689b3e358cd8ad24ae7870ec0cb2d12bd911d48737a532238147c07fa10c3cef48ebd6a33464c5f444b778448e068c4911e4a9984fa9cea062eec09044de0d977736e814d606dbb89dd33765213829652c6af0ba30073ac5f201f44af87c3e63d7dced5e88f986b798dd37dc0a809", 0x7e}], 0x5, &(0x7f0000001300)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r0, r2, r1]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r0, r0]}], 0x148, 0x1}, {&(0x7f0000001480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001500)="94e3bd47ea06357fd6", 0x9}, {&(0x7f0000001540)="f2d84010d0b2c18f9a05874c582cb0a7e13df12504621e2791639acb70888f539118ff2cc1834eefbe0a6d40d15f2bcd050abe6fb4c3fb07836d50af42113b3d092821072ab01948f0ea4f69a4f1eab60c3304c7670aa3cb432840046251f3aebf4cb63839cff633c9a39fd29c5d3a076201e2c9915458ffe59dbadd4fb34fd7b668082308880b196088da164a1a6f71039842d4b311c84a8f75653d0861b10ee3b2cfcf6f8cd7687fcab2649864cf4b5f773a1f26d928ae3cc989c4894ec53492", 0xc1}, {&(0x7f0000001640)="4736dea5bbe2277f2e54ab4ec72364b89913359ef11195e3d97d321d757a7e1ea41e1cfe07c2989b27e5fb74feaba0a5b248a0783946678864cd65e187627f411d10eab758add42a0d943ea1083e38845c47360a6f02ca196aa3c534a17d27f754f06b2274713d113ede0addb3fed3890af4faa00241a1bf07816acecd78b71e90d408ab8e46548d2d11e724cda1939a94fe2ddaf1fa1ba33c95d35199ae1f5b53a3c8a657d4aed1a166874777b2481e5c4f451bfbfc3427017b50528539924b28292e6cbaea2c274482b3a7a0dea92e5d792a2f17a2", 0xd6}, {&(0x7f0000001740)="9b5a2a608a69ce41", 0x8}], 0x4, &(0x7f00000019c0)=[@rights={0x20, 0x1, 0x1, [r0, r2, r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r0, r2, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r2, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1]}], 0xd8, 0x8040}, {&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001b40)="eb58f74fc1a43480a3a01baed6d52d6c7a88c7d7ed63b34ff306213335b90e6f295a102bab0fca941ac26312f6cd1352dd748f792bd6814b014e1cf2b2c4c62a619ad3d9fc0eb2634d568dc7df794673d0ec3cb58e8ad323be71ca5909f1a01f5930b9195f77de09a1aa3e0426693d06862d48555d44a8470f2431b2d90a996f387fc0bccfc1e5d4de77c21a1a660b3b5cf351665d6451d1d8", 0x99}, {&(0x7f0000001c00)="560d63bc4d9f85f56c8a59b963f929e0d3bf84e11ab4bf23f04054b9a67029f923fb04e0ac", 0x25}, {&(0x7f0000001c40)="bd39ee186cf83602a03305961114531b57837c07eda440e3d7c9a4bd8962e40f56d673a42c583280539442b906876f98f90c497f058bd101413f944c48f41d664d0cd7d01bcb079ea77dea1ded97a7bf73265cce94d83e0cbf6cb806eaada63d516b81586e100428f6ce54365424ce0fd64cb47cddbb3b9d585e56781f435517dbab189f5ceb0674a086efd4bea03cdb1834930eab8461fdc9a992b1179521dd32b581281329943eca4703defe640d6c183301e8fe9b4b4145c8294488f1fc15cd1462381c17cfbff92d98c78020a38e5e625c7ad30c51b415350947d03044ea147dc0a474a08be0fa05de0422d5e7fda7b4a8b509a91525dd07e6865c6a06455c838c7de2d5dce4e35023496360d603af67674c9196284da4389e0d316b3eb3a6c152bdc6cfd20c4231c55194c081b830d66a769b428853329952bc71c776ce23215e61a918121229d23974d8624a4e315df0c5edbde35f8ef3748eff0556e866c70239c4e83ba373749469dc1651ade2870b02216e99e60717700c5a8da6a1392f77189fa232f06e1c578660f3812917649004013fb15cdf8f20da2cb6f0fd804db536aec63237d2f7160d39de6d0e40e605752e345dcaf8d8b62c390e8fb97be2c81cab62ae420f591a06b9176a28ec4f5f638638098184bf58fa6154faa09c11c6aad160d4312e5ba9d9340de5d275e8a07e163ef995d29a243835dbee467586bd4a6048ad3c8e1a0e6db3a4c0638904cb9ba11387b6ee7dbf5cc8231da5c4953c46c354b143b3b073fa0183d29c18f7922aa24ff4281aa6ee13f11ab5ed428990ce70c4225b13b77a6d7131ea660f77da04d2d311350e2eb2e6a23b33088720755dbe23c08493938985a25321ae6ce2cfefdd04cb126d17311dcbc125a784552b375b54eeed7a4ad07694ca259fae83af7ca370a473300368a07b7e59ce36ef34abd008de59dac9ac0e72d3756324dd1b490fedd3f2a38bfd01bae01cbe7ac23e7386325d54984c0e0a51071d6505305fa5d7e60006a066d13a490f2e45d304efbc4f8cada9087393169a9d3012d42f20712e325e9edbc10cc06f55eb1887f611b3a8aa7dc4dcd579239c42480679766ebce5ac89f304b75f965eafba8d78ec3de7b271d381e48744407c6cb27c0821100f521409c779bdf8442a456ee719d99c07cb2d30ef2df8aa11e8d8175da2ea3e997786e9ff63fa3dd7d8787646e99bf4bddaafb7f48531771546783ee370ef6c07f4e77065bc31a1bbf0e007c76fbea095beb0100e443368c6dd4d79557defccc77ae4a72187cd06423e0a9848c10ce55994b583ce4569774103c5cc8b2c26b52168b3686c4c4e58ab14c8bcdc2b2616df324a91466637f5da170b8dfe4686c460e21f19646b09596997f7a857957c49fe4809d76e22f8ec322dca3946a96309f0fc00e98c39294ebfcd8a9bb05f8a65cf38616a3095f2cf469fdc642cfe8d6c40e80674769d9202b2312bfcc4e841921a1e94ee994c1ebe18adc8d7a7ddd850c420bcf358403c81a594760c4e8dcecbe2702746372223962c521018e3d0b957b245c5c203895230e0edd61e8ce460349ee124c2781a7267f17c98db004bb43796d06265a671458d4039641e0378ac36305ca52a2416302ba23fc37d20bf01e942e5b3d82ab4334659e0933bbbdf0dbd3d8b9d3fbbd8023a78732871a7bf9b11b72da6eb91fcf84f1a7c36ce54aba18373452937fbffd6d4fbff367628bffa16f4e3fd5dfe5e9855c09b3cb3125472be20b5d00d94ae3c7fed33bd9757da45f9ec6fec7d07718b9867b087996f35de0ed9f8da59c456e538c19342eebf8d7bd375bc0c530ebc92f38926bc9bdeee3d00f272455a0dc2ac9d53b94f9001f547e669001e9a8fff1e580827dc0eabaccc949f51cd66fcccd3531b43c589e17ead40f915cec521f92fe406823d28a0dae16d005cc3899fd80276cc2335dc9803531c1a4b6b17c6307909c6a0362654ec899ce908a4e3492db5850aacebe0272488bc8945656ca4e10e7556e8adaa96f95b08b46f16a206235e442e31f8f1dda61da734c3759ca3b516d912f0e96f5a43b458ec66e59a71c2730e9692bb1a3e4318a9775ab58ef42ca192c5dc06fde6e75f90d5a4f40ba231c75e330e15923001213938045cf29461b57ebef8cb055863bf9e8ea2f2bac371e9cc9b2d7d12c695eb00778d6046a613ae914c8a4f1f19e6a35a06bf4e52ba46b16d0a95b4bae165b39ee3128caac5161c15354a62a6257e3e452f73d78dbd87eb5086d36122b80fb6bd90a03a5a9f251b9320a6df75e96be47d795b7fff5a13c87683e3e669272d46215606d1392632dbb4a7f81ffac5d9956d3bae390464e5ee92b78e78de032c3c4dbca6fbfd2386af5b1a81b93a6df5f06a2cb08b9d8fc7783bc76700907a50510e4e7a32192c59543e31045085d53edbbc895985edb7161d0755aacce9bb0f7a4a294ecc8b0cb650b447fab1bf92eb7a48051d85daa4255844d1885927bde7d0a176887c1fbfd577203fc74ad1713ebe5ec5d54417ca979b2df2e66973c4f47577cc348e83b7bbc00349d2fbd1be68195e45a1c55c467de7a990820177de14fc973e031d4cb1529b72084748c60f5423d353b420205901960a49f2e2b9806a772bb41bf0dfff491f53010e6dd058961e90b56bfafeb0855ddc2663949e03643f593a85ae8dbced06519d3f7fc457652e39949b60defcd3cf2e6ef78820ef0cc0fe6d5a49c803823ef7ba939d248ad0c0db9e8a0cf8c9f7d9cb9edf0a9ab81b36ea7ffb75ad96bfab7fbd048fa06a5cbd516b1203d2f22fcf216267e1e888295af507f4714c1e311fe3a88cd020d644ab6453ce3116b9c23c5b6033dad8e41ba7038d6b8a2abcb39aaf2c7e32ef2019f085118c2b83421e19a65238b928778fe6f3223a72e7cde170ae1ddc56c4b6794c61deb1cfff462ac9579605ec3a15d61191b9fb30b988e70fac869780e75e3da4d13c320fbf7d78b1cf811eda79c7308d5cd7b0a6b5820e80540215f73b1d400905cea7d6b450e816bb807e2133664396961d16b1a0115f16aa667582ad84a6bf451988d868d36d5a11e751fa612a0a03114c204625f419e80479d19dae9f2e52ef7145e70750efd3c4ca1bb55533408d517cd9e4ac1ee58af9717e54f4069c98af45fffacfc05e352f62a36db6ceb17d13573c4c2a04cde377198161a6c21e9696a441f8d6310cc3d672216bd44c1292680a4fcb549c681d57dc1a6d48ced486d3b319081af234ee61162d0ead3f71283fff44a558dd975d4baaa3be8e66534b6f4da8282afeeae8c658eac611d431c476afaa3cdbb697de115148c47e268f1e17ae3fd5d5dfe12ce135dfbe3ece2fdf1b59b952cf94f599f196cbef4bb8868f52321bc8714c1e3c733a6c88bc2f93b8d53a5c2a8d6f11ec608d7c4fdf9b7fa2db37e273f81ef909a72d67ed60c1813efd4936d489bb6fe06358301809b54ddd57c56c419f278a2331f75b8a1e191759070b6224e7506f42d5d337eb0eeb51d043bd76d895317cc1b15c051c585845f6d234f48db7bdc7b0d26fe168c41cfcea12afb71b49fdd4fb526ea2a251b3831c03f0ed0afc596f037d690f45f5a40dee31f21747954b7533bc36e7b4256305be05cf29c69ed99eb3ab66a6cd7909fdc2935103169787acb8bfb28c8b47b7c0485363bef4465b1dcd9153290a9c567f951744e0c0f69df3f23f442c20a89acd92ac82396a91887990585f68cfdf57bfb4f0a7853c94eeae9bec294ff367db9e79b18ca5039552bccc5a4f90313f357cf59686095c71b83968826579b764b6ad105cd7679cfbe02da68f3fae4e4c9e66527b3059f552016c3e618132aadf3a42aab5086b21c3ada8df2646ee97a85e231d27aee21675d0672bc353f46b515182e7ee5a6e17eaf547262827deb3a1fe178b0f5a0c5d602517d89724694292cf200d3633f5dd1062e6d874230b51417f05738e49d8f55aeb2c34ce991f647836325f6a0bd7c4657ad66fa53a8bdbbbc2fcb40405caf886fc0ecd164ed35c9b2a87111ad09d2e1a646b23d14014334e654e56ed945c9526531ef33fb2befd56aee8e8a0660f355d5ebb4ace59b174ef7c20a145c58b535cc676dba7856e150e507ffeb3344ddd192c4cf9468fe8de59ba270ec65ab5cf017f3b83254415a20571f9f2a540c3e41308974bbaca29f8ddf3d4c5bf9bac3c7bdd0c0edb6efdec1d7b7d82ac3482288a479b5ed52c707e6266ca95dcd0d0dc6ee1ea1b1993cfabc63c17f85784d96f8686bcc7b840a3d406d1f45e1fd1cd6735e3feef548f143f75223d15d4452f9618d0057a31c83c73f8e0ad77d3a37495059a8618cfd0ae2a6a58d80c7ef16ebf46ca2e010805852d50ca07751ce1e36df5e13c87ccaa57e33401b8cfe9f89281b64eace13df8b7987998149ac1d1ebe72bee60bd9274e265e6d1825247da9e59ee96579c5c4ef7b4a2649c1adab8ada581d3927780b60ed7d8f43b26706e8b292cfa7a22414d53e71f0c13134fb64ae464c6e40bacd21b2f961a027a72854ffc2a1e4dccd64e4eb1f8850611378601b98206fbd68fe6ebd192aa868148f9053ec5f56d656e433ddc44dd306d293170171638e287872420d75901df7c2181d4662f2bad446aaac40fe04331ad7f60e04b28c0ef3f2c32f8088ab4e25035866ec94763898e2e02de60dddc75b8462e3a8198850e67fb64721bae3a8a62803fc43843ad7aac5fbe6757898e7500bb6107e38fadf5f255fd71d67ed3b2f5d08bf9ce623d0864afab5ef9e24c8cc72af655f3a6cd274405a73b496899a64bcdb7affb4912c7d5e19ec524e4ec45109b1fd0f9451acb25367bb370ead4c30725b27c131f584237b20c92c999d4a9402b3a6712263bc8917114aaef11a71d2de3ede46549cfeab64cc0056a94e471f00fcf1a754f49128c7f954ca560e06da77746bb5e183d50ca30415ada4eb34ccb46d34c62053bd014ebdc594c2dc3dbe3a2770f8a436232281770037991800fa6d6d750d5e56aaed388804cca80da35d6ee4344f454bf0ba90a552ad5fc5f79a1ebe2c3e9a6547165fc2ceefcdc5b5e21ecc856c5c833e3e3936ce2d48178cf6632501c32192dc9943f2f692e93a087cc8495d08e6a4c75ad32f8d278a87231d1c69df22eb2612c5cf4c3ead31c2062610d598d6ec3ab47580c411a332a151079ee424cb496cf2a97a58fc8307cbdf9c4020ade16c3731cd32bbba8043af14adfe9081f72f55be00ee109efc6ca51a49238bdbb1d60d31c068928ad23872642dfffcfd41054a98d7c2a2f25ec3b1636b8cbae28090ca7e66edb7649ef09fdfa485f25ec3d32aab5d1803e1833cf89d9bc3ad2fd795d805e11623ec4795940d72b9aed5b7351286edefb329f999494fb812c25d37bf432378522d631455087eb6c5cf0fdc7fa4f959a8ff527bd8082e0c19af12188df14b9e0a83a0932d90cc888535de06dfdabbb6b08b4433cd661f5f1e707b64b5dc771333e043e4a71c54d072d65e0f94e598ba2df2a015c2c8ac2675834673a913cef5b5ed224c8af91d8a88f48db25f3d21243bc7e5dc96eb47790b8b37a8f61107c8a550de651bef2bdb42509ed6ec3b86671d19c9227d7ece61b6ae2d782affdc08fb94003d2135719ce898eb162ea871722adc47215bc2e720f96aeca1e231c7e6e1af05409d88127d2d89ba76d23d7cc1cea8fe734c4cc041ffbdc380c9574e168de1207b10878c904f7a2e423b52611cf260c2ed620776eba197f52a5433bdebb9e019c347e05", 0x1000}], 0x3, 0x0, 0x0, 0x20000801}, {&(0x7f0000002c80)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002d00)="e75426c4af29a5bc028736f6b4f06aff62e824d02fd3d2db0b2ed5bde508cbc938dc9cb60c9af9b48bcebf24a79c3c4a725934b8590295f80a00fdbca62cae491c1e0e8f03a1ec874dcf01230eb2c571e60da459d7b6a6af9f53df423e1aaae1d5e694bc2aa4bbb9bf3c7af145bf4149f69858ba3866996aa3153a9a08beadb95d1089e3dc5ab452a4131ff275b8262816fd750d32", 0x95}, {&(0x7f0000002dc0)="c8f79c2acda76052e26261ee4eb324fde321d0c6d14529dcb7b16be140abf8d7939321250facee281b4e2e687583c372cdd9d203ac0a02c2b2bf45f6d22c9af7d32fb6fc62566d89ee90a74fd0b809ebc3edd84bb4be4fb87950a7caab759b2d645e85", 0x63}, {&(0x7f0000002e40)="8f889f5581c0ba", 0x7}, {&(0x7f0000002e80)="f41da0fe", 0x4}, {&(0x7f0000002ec0)="f99261b2a722c18be4807be077cde08a575bd6394c3f0ecf057ba5c26ab96734f19cb4d1cfee91bcd0e5d01e471014f92c473954834ef4928b1fc8807f9d68c7a06ba4fd2248e34a279080a80dec96062351530a4f1442bf5bf3dc2941373002b19820435b2d5ee3bff809ae403f4deca62aefe6b146da46c36bff41c45d7017e12097a2c5d337b9", 0x88}, {&(0x7f0000002f80)="c3b0cb1d486e033bf14720769da2c1916550a25e6013cd71c4726ad80932e434e0c384866a33ca25742447b27c9569bb6a0e0c2a17d0009dfe2b28043c0375a0ec291d7b94917414aacd0ef4d95f69e9ebe46e72ec1b540cb3c3ce3fd3fa3fcdc659738796ea60e7747f97c8", 0x6c}, {&(0x7f0000003000)="9823529440026bc0abebf5a223fbad0ca62618c8", 0x14}], 0x7, &(0x7f0000003240)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x28, 0x1, 0x1, [r2, r0, r1, r2, r2, r0]}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r1, r2]}], 0xa8, 0x4}, {&(0x7f0000003300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003380)="2e55dc7b975e005ea740b4dcd351c469bce8f10cba33ff2e26a666bfbf06567890d163918e2f7ca894c8fec7253cf5a0d4a46b4c4036f9612def172691c96e5f262682c5d060cb22e0ad8ae01d1faaa45573cdb9e474e08981da86dc57e117949261e243a3aa8ee922ddad3157a2560513b98bcfc5ce7db6fb0177f33db61b0f94979e9c634e9ccbc8b42a90a0f3bd36be32fe82691dbaef1360786595c986dfa9d223ca1133ea23ace80553e9bbc7c853ffad5312e79a", 0xb7}, {&(0x7f0000003440)="2d35e570be7afad8873e7d32cc338a254d2ad31189d10617e406fc6767fc1df9bc3718c59afc9382d756be8f0fa7398b6ed7d221c88f3e453d89aef03e46c26348f2ec99704b3253777ef496f05f05c6e2b1f6f840adff3f69d5a7df9754e2f5354667f21945e95a50b8ad25d8fd516f8ab1e74f87fe867c6769b5e08286f7a90bbd2218181fe10bd46efed8563dbc5b4dfae689d31c9f65736e6cfa4fb2d32688d1a4891fec69b3e3e49b040c834f54123f64ce4ddb445e7f2bb2a7e67f3043534ad41833bc55b517ece29240422866d9812521eafbd3181e09d02d7310ef1066a6250aae2745cb5d15", 0xea}], 0x2, &(0x7f0000003d40)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @cred={0x20, 0x1, 0x2, r42, r43, r44}], 0x110, 0x40010}], 0x6, 0x4) r45 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r45, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r45, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) sendto$inet(r45, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 970.649210] binder: 14241:14244 unknown command 536872000 [ 970.649220] binder: 14241:14244 ioctl c0306201 20000080 returned -22 [ 970.674186] binder: 14243:14246 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 0: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x5, 0x2, 0x307}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x386, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xb0002, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000140)) [ 970.685486] binder: 14245:14249 transaction failed 29201/-28, size 0-0 line 3255 [ 970.735993] binder: 14254:14256 unknown command 89023248 18:33:20 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_getneigh={0x40, 0x1e, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8, 0x5, 0xf92}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r1, 0x9, 0x3}, 0x10) 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x4, 0x5, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000002417140000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffffc12602a37aba21f3a7e7cbdd64744c86c58e0da638cf04b8427007cf16b3983d28cbb64db0e6e0"], 0x0, 0x0, 0x0}) 18:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 970.736003] binder: 14254:14256 ioctl c0306201 200001c0 returned -22 [ 970.746982] binder: 14253:14257 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/101) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x41, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000e000000000000000100000081f700000000000000000000000000000000000000000000000000000000000000000000337fbe97a4fdf61c10bcb55f4e128b9b921aeff8b776509024c1bace2c397be120d18bef243816cd71374320483e7ea59964f11ab64c3cf461a7e590ec088a0c68addad1987a8b8dd7312457e8f831bbe75cbff89120822da5771ae721dfa813742e4fde551c8838670cb884d9914797bf14057d5cd460d593ccedab0043d31158c98899f9e7df2b502cd06bd0842f0a25c80014861dba541b06ee"], 0x0, 0x0, 0x0}) 18:33:20 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000240)="09436b9b609462c6b5e08f85bf3fa06714774e6e7caf994e1f5bd0b0b722cc5cc11bd56a0ddddd774af1cc1975304cc6255543990e81ed1008180a0a0e7dc3f8f71406a6a803649aed13f46f647959aa214041dc5188ea64c03bec29ce6a4e3daedb3625126dc3f09885a3b467fc21ceb8ce591411a4eeddb5472453ec2d92a0e9", 0x81) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/115) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) utimensat(r1, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) open$dir(&(0x7f0000000100)='./bus\x00', 0x1, 0x104) [ 970.747038] binder: 14254:14260 unknown command 89023248 [ 970.747048] binder: 14254:14260 ioctl c0306201 200001c0 returned -22 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64, @ANYRES32=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="f9d98b9ce0661f3a875b04898e4307d438b02c3fbc9a85e0c09f09915dea0f15324006110c99bf13e9bba08b0f6f2b7132150285ff49e8360fde81828abc52111e46a21328cd7effcb5242ce37d1427525672afb1691ed1071e13146a380e36f3e64e02f4bc580ea1bfbdc6421700de2766a1e2e532acf4b5721edf777dbf7a872f6a553"], @ANYRES16=r0], @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="292039553f5130fae4ed6dd9851ee843ac07bc2c5cd2ae22e1d357646b4bc62cb36d6fb587e9c8148488", @ANYRES64=r0], 0x0, 0x0, 0x0}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) 18:33:20 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus', [{}], 0xa, "e661647007e82fa4bd596ac31467decc0f76fda761e9614b51f04c616410f08b26f60c9cf3e1f81fc6b09cec36704f376107cdbba60929303522d2e12c5203b7e052a1489c6f4fbdbeb1875b75465a29dcf584405f8afe135dfd48fdaa7bec671aaece833424ee7f411a31d3b854683825f9"}, 0x7c) r3 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000c80)=0xe8) fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d40)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000e40)=0xe8) getresgid(&(0x7f0000000e80), &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f80)={0x0, r0, 0x0, 0xb, &(0x7f0000000f40)='cpusetGPL,\x00', 0xffffffffffffffff}, 0x30) r10 = getuid() getresgid(&(0x7f0000000fc0), &(0x7f0000001000)=0x0, &(0x7f0000001040)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001080)=0x0) fstat(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001140)='./bus\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001200)=0x0) r16 = geteuid() getresgid(&(0x7f0000001240), &(0x7f0000001280)=0x0, &(0x7f00000012c0)) r18 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000017c0)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000018c0)=0xe8) getresgid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) fcntl$getownex(r0, 0x10, &(0x7f00000030c0)={0x0, 0x0}) r22 = getuid() r23 = getgid() r24 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000031c0)={0x0, 0x0, 0x0}, &(0x7f0000003200)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000035c0)={0x0, r0, 0x0, 0x3, &(0x7f0000003580)='#! ', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003600)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000003700)=0xe8) fstat(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000037c0)=0x0) r31 = geteuid() fstat(r0, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getpid() r34 = geteuid() r35 = getgid() r36 = getpgid(0xffffffffffffffff) r37 = getuid() stat(&(0x7f0000003880)='./bus\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003980)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000003940)='%\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000039c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000003ac0)=0xe8) getresgid(&(0x7f0000004040)=0x0, &(0x7f0000004000), &(0x7f00000040c0)) r42 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003bc0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000003cc0)=0xe8) getgroups(0x1, &(0x7f0000003d00)=[0xee00]) sendmmsg$unix(r1, &(0x7f0000003e80)=[{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="fed59a729ce1debf380511d78b2bf11e79dcc81b7c0b41cad62c643f7353afc24331862c9b5fdf2f7f553a4b652047bb6032af306be5267a449569e946328d541f1aa35563ea74e61da968fb2c312c1977e6261d5b63ce4735030773c5b522095b2c259f77fc39e2f0bb75be852839610ce7ce7eb7d1b5", 0x77}, {&(0x7f0000000400)="ba0d6b7e515f33d469d183878587fc675e525afa0c93e3bfa7b1a6baf37621c83a31cb3c3045d3e02d84ba8d5993c83590459699584e950570aff99cdc12620458112552f526f3759378eeefda3d3bf0d9fc23d3245ea66ac43512fdf3f1a4ede1cf730f75e7e30d07fe0e267feab671656e3952fc9d63ab528b39d13c8f081fa1596408451db62d634b579b0ca4bcb3dd41bf93d7099564825563d7a0e96662c871e23523ce71270b68a645605653386624fe74c1973bc371e3b1e412b1e182d843afc24f481a5f8087e9d7d2a8027a7845264aa7705f785f1e22b7b78c83fd2bfed871c19b96b0de376e3f1525", 0xee}, {&(0x7f0000000180)="b435cd48dc7e15681dededd013", 0xd}, {&(0x7f0000000500)="63152cbd4495a262ef1dd8ebda2ae8ca1886d02b640e86bed6325c7f6990afa6ca46479493421b28268cc8ddf34c", 0x2e}, {&(0x7f0000000540)="042fde848719f8376d3070feaac976c0d9b70da5d853635f5e5e4bac66a17e738f71879599d9d6f8e8f6d80ae2f94a43bf383a022ab5e0c1dc73e6553cf5de2d30d72066730a03139a020778097c21025b6fc24bd4c5b22047dfdb65c03d41743a915a49d597800494f40b5b627a64649c35d9323371590796c3629ffcc360106e8cb110368bd6d9ecdb6a4ed5955397f7b6c829d061bc3d35bca4a8c65f4e90c0339334", 0xa4}, {&(0x7f0000000600)}, {&(0x7f0000000640)="be6b57c6f9e23d61c1a645f9ebfc000077f09295d4b629c9903b775ecc5a42b00aeb514e898107e58f8b0e0541047dcd1c50692f7f93845ce81d7645d2ced443532f7094d2114b1325", 0x49}, {&(0x7f00000006c0)="dc22c0a6439c13f8aad3fc72610c7a683983895a1013f753a46d5a26393ab0adb96f33a61261b91f87fbe91318198da7d21a3114858f9b20aeeaf1e1d0bb6a02ab5a806d7dd471414ba43ecccc1ec2d166867cd0ea081d7727aa6a611cf347a08fbda1f396cfad9ac2b79cb3be57504475abbd23f23e6a184f67c630b84dbf69106ef46f32464c3b768737c093809cf8a66b0489b4068ddd92d31fe474941d3d89e5ff6bc520bf3b048ce9f3532cd523edf5", 0xb2}], 0x8, 0x0, 0x0, 0x8000}, {&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)="c84e4ed3a0e9dd525a06", 0xa}, {&(0x7f00000008c0)="97016382c672a0a2065e24b87388f6c87ccb4f7fe8f3e88f7efed241722e55d3a4027df6cdbba5a6ec55aae8d9f85cf38384c3ded0ffd97833c7993ef68245be0ef7bd58a0a8c39e80fb5d0507", 0x4d}, {&(0x7f0000000940)="03b84f19cba65d03b90895e8839d28a657aebcef96eff31cefb078653934bb1c45df4228d8ddb6ffd60d84180c91ecd35f0e39eaf8f34f5ac43639c51c2bd948e5a40d3fd7fcee12f24098235a9c6ea95996abb3a4d40a09cf59dfe98bdfd84ec651279661f865cc791540967f36c072c3be357dba83dfeadef0fc6b0bc3ab3f4ae79f215124e806e3ce9de03d60fbac3e27f1874334d5ead70cea09dbf444f44f27", 0xa2}, {&(0x7f0000000a00)="4bbc3f8450f58298a4ee4f489fc863cfe4113540e6a0b36a74439d5dcd8c3a5cb24e0bf1dbf3774f6a3ebef24c2d0cbc1eaf8c37455d21d23362e907886ded8fea046412431ca3cb175a1e", 0x4b}, {&(0x7f0000000a80)="aedad0ff5168c65c6ef51f4cd5fa855689b3e358cd8ad24ae7870ec0cb2d12bd911d48737a532238147c07fa10c3cef48ebd6a33464c5f444b778448e068c4911e4a9984fa9cea062eec09044de0d977736e814d606dbb89dd33765213829652c6af0ba30073ac5f201f44af87c3e63d7dced5e88f986b798dd37dc0a809", 0x7e}], 0x5, &(0x7f0000001300)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r0, r2, r1]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r0, r0]}], 0x148, 0x1}, {&(0x7f0000001480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001500)="94e3bd47ea06357fd6", 0x9}, {&(0x7f0000001540)="f2d84010d0b2c18f9a05874c582cb0a7e13df12504621e2791639acb70888f539118ff2cc1834eefbe0a6d40d15f2bcd050abe6fb4c3fb07836d50af42113b3d092821072ab01948f0ea4f69a4f1eab60c3304c7670aa3cb432840046251f3aebf4cb63839cff633c9a39fd29c5d3a076201e2c9915458ffe59dbadd4fb34fd7b668082308880b196088da164a1a6f71039842d4b311c84a8f75653d0861b10ee3b2cfcf6f8cd7687fcab2649864cf4b5f773a1f26d928ae3cc989c4894ec53492", 0xc1}, {&(0x7f0000001640)="4736dea5bbe2277f2e54ab4ec72364b89913359ef11195e3d97d321d757a7e1ea41e1cfe07c2989b27e5fb74feaba0a5b248a0783946678864cd65e187627f411d10eab758add42a0d943ea1083e38845c47360a6f02ca196aa3c534a17d27f754f06b2274713d113ede0addb3fed3890af4faa00241a1bf07816acecd78b71e90d408ab8e46548d2d11e724cda1939a94fe2ddaf1fa1ba33c95d35199ae1f5b53a3c8a657d4aed1a166874777b2481e5c4f451bfbfc3427017b50528539924b28292e6cbaea2c274482b3a7a0dea92e5d792a2f17a2", 0xd6}, {&(0x7f0000001740)="9b5a2a608a69ce41", 0x8}], 0x4, &(0x7f00000019c0)=[@rights={0x20, 0x1, 0x1, [r0, r2, r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r0, r2, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r2, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1]}], 0xd8, 0x8040}, {&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001b40)="eb58f74fc1a43480a3a01baed6d52d6c7a88c7d7ed63b34ff306213335b90e6f295a102bab0fca941ac26312f6cd1352dd748f792bd6814b014e1cf2b2c4c62a619ad3d9fc0eb2634d568dc7df794673d0ec3cb58e8ad323be71ca5909f1a01f5930b9195f77de09a1aa3e0426693d06862d48555d44a8470f2431b2d90a996f387fc0bccfc1e5d4de77c21a1a660b3b5cf351665d6451d1d8", 0x99}, {&(0x7f0000001c00)="560d63bc4d9f85f56c8a59b963f929e0d3bf84e11ab4bf23f04054b9a67029f923fb04e0ac", 0x25}, {&(0x7f0000001c40)="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", 0x1000}], 0x3, 0x0, 0x0, 0x20000801}, {&(0x7f0000002c80)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002d00)="e75426c4af29a5bc028736f6b4f06aff62e824d02fd3d2db0b2ed5bde508cbc938dc9cb60c9af9b48bcebf24a79c3c4a725934b8590295f80a00fdbca62cae491c1e0e8f03a1ec874dcf01230eb2c571e60da459d7b6a6af9f53df423e1aaae1d5e694bc2aa4bbb9bf3c7af145bf4149f69858ba3866996aa3153a9a08beadb95d1089e3dc5ab452a4131ff275b8262816fd750d32", 0x95}, {&(0x7f0000002dc0)="c8f79c2acda76052e26261ee4eb324fde321d0c6d14529dcb7b16be140abf8d7939321250facee281b4e2e687583c372cdd9d203ac0a02c2b2bf45f6d22c9af7d32fb6fc62566d89ee90a74fd0b809ebc3edd84bb4be4fb87950a7caab759b2d645e85", 0x63}, {&(0x7f0000002e40)="8f889f5581c0ba", 0x7}, {&(0x7f0000002e80)="f41da0fe", 0x4}, {&(0x7f0000002ec0)="f99261b2a722c18be4807be077cde08a575bd6394c3f0ecf057ba5c26ab96734f19cb4d1cfee91bcd0e5d01e471014f92c473954834ef4928b1fc8807f9d68c7a06ba4fd2248e34a279080a80dec96062351530a4f1442bf5bf3dc2941373002b19820435b2d5ee3bff809ae403f4deca62aefe6b146da46c36bff41c45d7017e12097a2c5d337b9", 0x88}, {&(0x7f0000002f80)="c3b0cb1d486e033bf14720769da2c1916550a25e6013cd71c4726ad80932e434e0c384866a33ca25742447b27c9569bb6a0e0c2a17d0009dfe2b28043c0375a0ec291d7b94917414aacd0ef4d95f69e9ebe46e72ec1b540cb3c3ce3fd3fa3fcdc659738796ea60e7747f97c8", 0x6c}, {&(0x7f0000003000)="9823529440026bc0abebf5a223fbad0ca62618c8", 0x14}], 0x7, &(0x7f0000003240)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x28, 0x1, 0x1, [r2, r0, r1, r2, r2, r0]}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r1, r2]}], 0xa8, 0x4}, {&(0x7f0000003300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003380)="2e55dc7b975e005ea740b4dcd351c469bce8f10cba33ff2e26a666bfbf06567890d163918e2f7ca894c8fec7253cf5a0d4a46b4c4036f9612def172691c96e5f262682c5d060cb22e0ad8ae01d1faaa45573cdb9e474e08981da86dc57e117949261e243a3aa8ee922ddad3157a2560513b98bcfc5ce7db6fb0177f33db61b0f94979e9c634e9ccbc8b42a90a0f3bd36be32fe82691dbaef1360786595c986dfa9d223ca1133ea23ace80553e9bbc7c853ffad5312e79a", 0xb7}, {&(0x7f0000003440)="2d35e570be7afad8873e7d32cc338a254d2ad31189d10617e406fc6767fc1df9bc3718c59afc9382d756be8f0fa7398b6ed7d221c88f3e453d89aef03e46c26348f2ec99704b3253777ef496f05f05c6e2b1f6f840adff3f69d5a7df9754e2f5354667f21945e95a50b8ad25d8fd516f8ab1e74f87fe867c6769b5e08286f7a90bbd2218181fe10bd46efed8563dbc5b4dfae689d31c9f65736e6cfa4fb2d32688d1a4891fec69b3e3e49b040c834f54123f64ce4ddb445e7f2bb2a7e67f3043534ad41833bc55b517ece29240422866d9812521eafbd3181e09d02d7310ef1066a6250aae2745cb5d15", 0xea}], 0x2, &(0x7f0000003d40)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @cred={0x20, 0x1, 0x2, r42, r43, r44}], 0x110, 0x40010}], 0x6, 0x4) r45 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r45, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r45, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) sendto$inet(r45, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 970.779188] binder: 14262:14265 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 1: r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0x1, &(0x7f0000000200)={0x5}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r3, 0x434, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed01}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x48804) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe4, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 18:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x6, 0xad, 0x2, 0x3f, 0x5, [{0x10000, 0x8, 0x4, 0x0, 0x0, 0x100}, {0xffffffffffffffc8, 0x5, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0x0, 0x400}, {0x10000, 0x62, 0xc39, 0x0, 0x0, 0x100}, {0x103, 0x4, 0x73, 0x0, 0x0, 0x9672f9f9eda263a9}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000000280)=[@dead_binder_done={0x40086310, 0x2}, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18, &(0x7f0000000200)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x1, 0x2, 0x3b}], &(0x7f0000000240)=[0x38, 0x28, 0x38]}}, @increfs={0x40046304, 0x2}], 0xda, 0x0, &(0x7f0000000300)="f8e6ff91151fdbc4d2cfb92e032b5a2163b0f5e3d1c007b473a4d3da7eeaa593fc3f0e9dfafb5c997382cbf34200f35f435a2a488e52cc9a08166e3cfd43d738e3498dd9ae4f6146929caa3bcd816502ee372916eb0bef896b29621a43f20072d468c567052835c893ae8c15c4261337e412cbc05b358174ea0e6c618d6e5a5927ede93119445e6a59c814b242b521a8b631162025cd4b70d32f44b1127a611e1e48d8cc394659f8b73c1c489fda91e4eb0ad3d2a23ec4cb6be96f2eac071730cc94e8201e63fe3e31ff3987a58a1a9f580ae53b08efc2c72968"}) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) 18:33:20 executing program 3: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 970.803235] binder: 14267:14271 transaction failed 29201/-28, size 0-0 line 3255 18:33:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xffffffff7fffffff) sendto$inet(r1, &(0x7f0000000500)="2574caa82f4655280d3888a14608ea3a7cdbf1dfd698095b84d7994f3963343c376f2bbfe3c76417208fbdeade0ddce1ef8367e500b1abec64f9b8b4ea598ed52ee647137ac0606cea5268a205ddb1cbb98a727b0767027d3213274b143712a654ed6cada0111bec689c47371dd677a6c18e79229dcae4496ee414c52a0b7a11d1a1dade68c30667ffd10c0c8c0b351ed6a385ba0325a860ff41bcc9e1abb7f40d38ab273bb4bbf530902fd58f41925573790f7b31432201e06592387da36effcc14532c11e26644847663b57d75d9735318c523", 0xd0, 0xbea6764bb6ce53d3, 0x0, 0x367) 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000003da48b53c5733c73c3db8113d7ee000000af7215ce46167bb50000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) [ 970.812605] binder: 14267:14273 transaction failed 29201/-28, size 0-0 line 3255 [ 970.841626] binder: 14270:14277 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:20 executing program 3: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 970.848685] binder: 14270:14279 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:20 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) [ 970.856206] binder: 14278:14281 transaction failed 29201/-28, size 0-0 line 3255 [ 970.859224] binder: 14278:14281 transaction failed 29201/-28, size 0-0 line 3255 18:33:21 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x8e, "0418dc40d2abfdece4e658b731eb351d39a322c24184dcd6ebee7fb7014b8f5b758c042b1adfb2b5be3c9451338ad486ee2395d98e0cf4d8bc5ef73921463c5759f81284837451f00575705b52a422e6bb1069945131513cf52cd93efe8811c43a3c2d8ffc7212c7d00771e8b31700bf073e8672a8249eb06ef4a954ceced395cca806c3cd5ef1f3d55977b51938"}, &(0x7f0000000300)=0xb2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fcntl$setflags(r0, 0x2, 0x1) 18:33:21 executing program 3: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) getdents64(r0, &(0x7f00000000c0)=""/88, 0x58) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 970.881755] binder: 14282:14286 transaction failed 29201/-28, size 0-0 line 3255 [ 970.898942] binder: 14288:14291 BC_DEAD_BINDER_DONE 000010005d000000 not found 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x12, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)={0x1a, 0x7, 0x2, {{0xd, '/dev/binder#\x00'}, 0x10000}}, 0x1a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x40) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000080)={@ipv4={[], [], @dev}}, &(0x7f00000000c0)=0x14) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 970.920835] binder: 14288:14292 BC_DEAD_BINDER_DONE 000010005d000000 not found [ 970.958240] binder: 14293:14296 transaction failed 29201/-28, size 0-0 line 3255 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 970.958369] binder: 14293:14296 ioctl 40046205 1400000000000000 returned -22 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x40, 0x4, @thr={&(0x7f0000000040)="6c2cef52958c5b3143e31488e993b6ed82c28c6576d7b05ed5a17414a103b566ad9551b41e6228017ee9676ef9144d92c4bd949a18af38157db26023b3c6b20a61f18c943a2b6b225c056472f9012115cd4b91e6a87b4f3cea0667cce0910a7796ad029cad30792915ef8e2dfed79e27b9e51a4c8e6b4235edf8556f20497c8812a27ecb5e24258f4bf328efa2e1443a8e3ac35511930a094de8b5cc0698e80bd35f25854cf9e8fd4090a2f7ed4f6a52", &(0x7f0000000100)="df7834b0e7ff504fbe75ff33917d9e0e1c1bc1d7f6932b690390767a4b8c7cddb1d8dcf2488ed9f9fe6a83c2877ed511d7604590f8ed5676c47b395c3d58ec8b428716339ebceaabbb04976902dc35270d315a73984ca05533b376399ec3a410021e56e791b2b8cd22f44a202548dbe97a4fa8f1f5bd3ffa3c2953456b88564b83ca3f87f64c"}}, &(0x7f0000000200)=0x0) timer_delete(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000050000000000000000000000000000000000000000008fdf28fb9f092dcff4b876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'eql\x00', 0x9}) r2 = accept4(r1, &(0x7f0000000380)=@ethernet={0x0, @link_local}, &(0x7f0000001440)=0x80, 0x800) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001480)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x8, 0x0, "91ed140ffca7d11c80cd5e430e58449be96c3696f86026ecccda2b88a29b3b0eb33c25242e89e40152144c80b78be168dea62808329e1df27ba45b3530816c1f0e61a6483a3bed37299d43f79fca10ea"}, 0xd8) recvfrom$unix(r1, &(0x7f0000000440)=""/4096, 0x1000, 0x40000041, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000002c0)={'nr0\x00', 0xa}) getsockname$netlink(r0, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001580)=ANY=[@ANYBLOB="ff0300000000000007000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000fc0200000000000000000000000000002000693bd1e4a58fd3c4464da86d99c5", @ANYRES32=r0, @ANYBLOB="00000000010000800000000000000000000000000000000000000000"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xf6, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1b, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0xffffffffffffff5a, 0x0, 0x0}) [ 970.960730] binder: 14293:14296 transaction failed 29201/-28, size 0-0 line 3255 [ 970.977146] binder: 14293:14301 ioctl 40046205 1400000000000000 returned -22 [ 970.981171] binder: 14300:14303 unknown command 131176 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000057bd073a91ca0587ec973fcc25000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}], 0xa7, 0x0, &(0x7f0000000140)="eabde1aa326887f8da0e84de1d486489d0acbbab1900689ab110dd4ea4094aaed4a2e189b486df214d06ae6e3d79b71b058bb13dee504876315ec976d9d7a3923e4122def1840df8498cdf150ba4bca832b072f01f58901455444fc74a4145dbee3b5564bb00e2d26c99dc3ffa01e0426c5d864085c6d06df3e1f363bd24b73c21dcc70f3a5c3b0c69bc7891efc0e7980c308d4004791b5108c7e28a64d886bde41bdddaf06ef9"}) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, r1) pipe2(&(0x7f0000000080), 0x4000) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000192e98733854a0cf271f5096daa1c931cb18d14b212ff4705565608889cf49d22caea7d60ef7235edbe8777e1f79cf71f70849c9aa18671e5c08251d4ece70b4f9e819dd2"], 0x0, 0x0, 0x0}) 18:33:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:33:21 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348400000000000000000002800000000000000000000010000000000000000000000000000001eb8d7a67e1b83000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12001c00}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f0, r2, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x11e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdee9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x278}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 970.981180] binder: 14300:14303 ioctl c0306201 20000040 returned -22 [ 970.988651] binder: 14300:14305 unknown command 131176 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done={0x40086310, 0x3}], 0x93, 0x0, &(0x7f0000000080)="b44bcb5d0ce835de9139bcc287ea1a974fce4be2fac041f39cca12b8acd2b98b987223c33e118cfab05be1981530ebba648efd7f276e55af3dd96abbcee42ae3ea246eaae9b753534b130a6dfbc9570c9ed8837e34a79fe458d3dd7e85e9129ffaa21d72f4430675d1c418eac935c968ff790cbcfe5cfbdb31217b3e1236c986a9093cdced7be554bc49f1b8eb44ad114a4670"}) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/dev_snmp6\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 970.988662] binder: 14300:14305 ioctl c0306201 20000040 returned -22 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x2, 0x7, 0x1, 0x0, 0x5, [{0x9, 0x2, 0xb7, 0x0, 0x0, 0x1200}, {0x80000000, 0x5, 0xff, 0x0, 0x0, 0x4}, {0x9, 0xaa, 0x80000001, 0x0, 0x0, 0x2000}, {0x9, 0x5, 0xde, 0x0, 0x0, 0x5cedeb7b5cdd79fe}, {0x9, 0x9238, 0x5, 0x0, 0x0, 0x800}]}) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x5, 0x100, 0x0, 0x7, 0x9, 0xffff}) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 971.037132] binder: 14310:14312 transaction failed 29201/-28, size 39682258917-0 line 3255 [ 971.045560] binder: 14310:14314 transaction failed 29201/-28, size 39682258917-0 line 3255 18:33:21 executing program 1: r0 = add_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="bc0dbd0e01108864404268e440774b7f8b2ea69b9635bb0d329d9062fa5fdd7de236c475cb589b3818f65806768c75e7aa01d73f1724601f996fcd4b64e2089de7aa858d5e6ea449ae24e8c8c1aac18b9e158d8c8f05a9ce", 0x58, r0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f0000000080)="c883e77ce5e43b023786b98c54d160374c4e10ba939200", &(0x7f0000000140)=""/209}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x6) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) flock(r0, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000004001380f73fa0353252c3fba5c323b3cfda2c3b0d4862e5e9512ba49c9874bdfb75959da0148f46af1339735a53425df78c213babd7d05e892c3784a98a8469435a5f8e23ae4ce806f752a2d8b3ed06cd11608ab584693d26ca2b42cfbfcffe75b8517ada9b2079b7a144c96edebb97487f87adb76f67e871cf2eeb515c8d0d3fa175c7cb0db12de877e2b87021f7a301e2a181463be60f46f866a761ec148c243efa410ae829493875dc9"], 0x0, 0x0, 0x0}) [ 971.088664] binder: 14313:14320 BC_DEAD_BINDER_DONE 35abd58049d5f745 not found [ 971.098766] binder_alloc: 6724: binder_alloc_buf size 3820227584 failed, no address space 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1b9, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xfffffffffffffefb, 0x0, 0x0}) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x205778c8788e1e7f}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 18:33:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) sendmsg(r1, &(0x7f0000000780)={&(0x7f00000000c0)=@generic={0x9, "f0ce851fabad29ab64531650f8a796b238693a9b93aa679f9fa8d040301a33a4a786ca820b657218fcedf0f065aba03250f0596dfd5c97312c2bb78d10ae61aefef36e5d8e817133416dd08759be6e2767737b529d17c6c5394e097761ffedde89f5777e9c6c7ae8f1acaedaf8b684e5e0fe54fe6e965fa299f6f0a11c1d"}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="31e706bae7d11074a2d15b9e710dc16a6edfdfc05588757e2a28fc2212129fc765aedc5e7aec30645f0d536ddac35959608d1d4afa5f9c6d41410710a36c99d874ec3938586f9ac9bedadbb693d73e02ab59f25aab5c42e3a55f5ccd977f0426b34f58c98ca5235fa9e92f919e9318fde0396b9ed05dd3e6582992fe22f01ffaebbf99b3246934051a2064ced9390349458018977b130759f302c3602024b371", 0xa0}, {&(0x7f0000000180)="dc7bc7ebbc0753d66f21115527dc9ef8cd", 0x11}, {&(0x7f00000002c0)="0ac6680c6d2fac728e245147cb7c46f256c20821800289dd5b3264f68043404efadcbd779411ac2177a0fafe160881022fb52e", 0x33}, {&(0x7f0000000300)="89b1302c39929c0a17c73bef6d4d29fef55c3097216f76c434d1c305f4492f805695d31794", 0x25}, {&(0x7f0000000340)="c045638c68f45e78004c6912d12bbf643cbe95a1c67e9cb3c9544f0a122c80cd79ebf2f6d185707c963d243b593495", 0x2f}], 0x5, &(0x7f0000000400)=[{0xf8, 0x1ff, 0xb8, "7657f02e4ab8fee4955563313b85b27866f54b022785b30fc138bbc633381433ed78331fa3ad5341b2147448b63f55e1baba99520f654f90c65d6e3a56ba98287aa15cac407165ad9e071392f3ec3818b07c7b45be52857040116de7521dafa10d9fb060823fc83a292a7b59df97b616ab80bbd50695ba29e6863b737cf84a970784e563fb1370d10efd07df8da1e596569ef283542acc7be6bd0a4b629eb6b0514360cf61fab5ac54343b91acaa98f807b7a19b0d807aef4fc92ef3b8a1a3f0ec5fd3b455f72d73c4f3619805d1c59d91cdbd4ad61bc5ec7c9e072a97f0f9b34535f6"}, {0x90, 0x19f, 0x9, "28c6eaad566a517bea3c92d1b8d72e6922d37b936b7bb9d12f874391fd8d4ab95719284ccdbcc5bf4e033543f2900e28f6901d48243a9753d727e79825ad2444984c85878d7d71ac9b12a19193b09ef24ffbfba162b2d2e8693a4aa773ae2932f2397b3862d349a4b0496006ec9f487bfb55dbd71256d28a97"}, {0xc8, 0x107, 0x0, "89dff221d2e0380a63e6f7b0f48afd04a94dd32985d924d245d426a1617f9d22a44931d44c741a537d207708b5ecef4aa0b6e4754f80ed885b1b27de65a16d5996373e830b0ad330d2345fbb0acc03ce1fad093c2ced7d731b76bf35e79546ae68f53458800bcff7575819491113976d8b34dee8c7e7631d990540a071fce3fb634caedae6d7da6e0c7e13972c38b5173438d7545fadab825d01477d0c002d27c7c4c3ebd14fa4461be0152d4d8f1ce3811caa45bd1129"}, {0xa8, 0x108, 0x7, "579ce4d804eca2e1391418f32710368f1d0af70913aed0d66cd62605e2d051c5c9870ae4412844f47df0201c91a08ae267c6f061b8def9137b9c8b9f17ae704758035dc66593c352ba93fec512b04b34d72c8d456384f4ac521a264d92af449756b9b323b94b37920c9c8ebfc9db20facee4bb9682ea7b2ee6710caf2165686b8f5f096ae58f915a70ae39d77f72411dba197606be35344f"}, {0x78, 0x12b, 0x40, "1374b9e6976e09ccee1a2b126309a4298f08d6d7e4f9fee068b28af1df5eab64ada56e68fca3f751c33f43cac54664863a0b16ffb828ac8f33f057b342b85144ae77d97616a2ea6df86001db1dbcf05e964206df21b2dbcade5dda2d5737703139b0318b6c50"}], 0x370}, 0x40041) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x20004e20, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$TCGETS(r1, 0x5401, &(0x7f00000007c0)) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff27) r4 = pkey_alloc(0x0, 0x0) pkey_free(r4) [ 971.098775] binder_alloc: allocated: 9320 (num: 487 largest: 32), free: 2968 (num: 1 largest: 2968) [ 971.098800] binder: 14319:14325 transaction failed 29201/-28, size 0-0 line 3255 [ 971.176827] binder: 14333:14337 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 971.207582] binder: 14333:14337 BC_DEAD_BINDER_DONE 0000000000000000 not found 18:33:21 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200040, 0x19) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000200)=""/77) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000140)=""/130) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff62afeb1cdb6c78c4b3ecc613f633e08ece42a570398433423789b2d4a46cce932af17546d958fe0bdcb2f7"], 0x0, 0x0, 0x0}) ftruncate(r0, 0x0) [ 971.266814] binder: 14341:14342 transaction failed 29201/-28, size 0-0 line 3255 [ 971.274388] binder: 14350:14354 transaction failed 29201/-28, size 0-0 line 3255 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x53, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32, @ANYRESHEX, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="ddbf0d42f657d2c1533649e9dd267c3e4d2b19bf4857d93fc6939f622d966dfeebfdc9788d059837fa33f97374d07766381b0f46d5554b576d76f5e3cee75af5429c2f635e63f4d98fe23be72613594db277d4310b7db21978a773290e628d0792cb1329028f826f59992dca8d921a9b63132892c10eda24a333a6e6da874f7fda7b52f9dddddfaa0f6366f5c693908f770284a879d8727918ffbf5c7ba2561a8aaf50924338b5f2", @ANYBLOB="a2c0a2a51db7d4aa67c6ed6a528935c8ea46d7dc00a5238ca04f3dc979ff97046f8cde1bf32a4520c0bb04749d88c732caae9888b6b5e6b73a985948888a7b82", @ANYRES32=r0]]], 0x0, 0x0, 0x0}) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008fdf28fb9f092dcff43876683393fc00000000000000eaffff"], 0x0, 0x0, 0x0}) [ 971.337052] binder: 14357:14362 transaction failed 29201/-28, size 0-0 line 3255 [ 971.345324] binder: 14361:14366 unknown command 1442113552 18:33:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)={0x0, @aes128, 0x2, "5136018a8fda0999"}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl(0xc6, &(0x7f00000000c0)='./bus\x00', r2, &(0x7f0000000200)="6ad6e9b9b22f3482b52107e22e566d2d9ac70e3f8d907d3df5193cbaabeae0412209abfcd0bb64aafef2fe97963ee6cbc540e1ab4038b86c850c23868239804bb8f2bb149b3230b8043b3234dc34d211542a1cbb4442a2b5dbf47c83f220218dfcaa7f29cbfdac3a49e7f63f98358262c0a0cfb9f70c7850c89e8ae5b98d") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) socket$inet6_udplite(0xa, 0x2, 0x88) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xffffffffffffff83, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000004001380f73fa0353252c3fba5c323b3cfda2c3b0d4862e5e9512ba49c9874bdfb75959da0148f46af1339735a53425df78c213babd7d05e892c3784a98a8469435a5f8e23ae4ce806f752a2d8b3ed06cd11608ab584693d26ca2b42cfbfcffe75b8517ada9b2079b7a144c96edebb97487f87adb76f67e871cf2eeb515c8d0d3fa175c7cb0db12de877e2b87021f7a301e2a181463be60f46f866a761ec148c243efa410ae829493875dc9"], 0x0, 0x0, 0x0}) 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000002b0ac929290000000000000000000000000000000000000000000000000000000000000000000000b446465bbd12a5c9c4faaf32c3e44545979c99e99ea5cf9d04843b689367753ea4ecee4ccd0a9e8eb1d24dcee029e059b2da9598a84ddb"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r1}) r2 = socket$inet6(0xa, 0x2, 0xe57) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r3) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 971.345333] binder: 14361:14366 ioctl c0306201 200001c0 returned -22 [ 971.347168] binder: 14358:14364 transaction failed 29201/-28, size 0-281474976710656 line 3255 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000004001380f73fa0353252c3fba5c323b3cfda2c3b0d4862e5e9512ba49c9874bdfb75959da0148f46af1339735a53425df78c213babd7d05e892c3784a98a8469435a5f8e23ae4ce806f752a2d8b3ed06cd11608ab584693d26ca2b42cfbfcffe75b8517ada9b2079b7a144c96edebb97487f87adb76f67e871cf2eeb515c8d0d3fa175c7cb0db12de877e2b87021f7a301e2a181463be60f46f866a761ec148c243efa410ae829493875dc9"], 0x0, 0x0, 0x0}) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 971.349950] binder: 14358:14367 transaction failed 29201/-28, size 0-281474976710656 line 3255 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffeeb, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000040)) r1 = add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="b42f46ad40b85d9eb41bcb8eba563cbbd44a00a3a2a01a001aa07414976d2e6690a189faba533dda31cebda93886346d823b2841b717b10c912b9cc4f8a58f7a70e98d544383dfaa7fef82aeea6f77d476c35b8ca5616a603ad7afb9be675cbe469bb863f709b7d52ea73dd83085f34515d28cee2a727c48f85cd15eed61b10949f6e0f4530a1e845a16106ca4d06936d9788bed639705eceeda499c8821dc309f9d09", 0xa3, 0xfffffffffffffffd) keyctl$invalidate(0x15, r1) 18:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000015b1300007000000000000000000000000000000000000000000000000000000000008da02789f7184e890000000000000000000000"], 0x0, 0x0, 0x0}) [ 971.380884] binder: 14369:14372 transaction failed 29201/-28, size 0-0 line 3255 [ 971.434588] binder: 14376:14381 transaction failed 29201/-28, size 0-0 line 3255 18:33:21 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") fcntl$setstatus(r1, 0x4, 0x2000) fcntl$setstatus(r0, 0x4, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x1da, 0x404001, &(0x7f00000000c0)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000080)="3a19dab26dbeacc2d503", 0x0, 0x40000, 0x0, 0x34e) 18:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000004001380f73fa0353252c3fba5c323b3cfda2c3b0d4862e5e9512ba49c9874bdfb75959da0148f46af1339735a53425df78c213babd7d05e892c3784a98a8469435a5f8e23ae4ce806f752a2d8b3ed06cd11608ab584693d26ca2b42cfbfcffe75b8517ada9b2079b7a144c96edebb97487f87adb76f67e871cf2eeb515c8d0d3fa175c7cb0db12de877e2b87021f7a301e2a181463be60f46f866a761ec148c243efa410ae829493875dc9"], 0x0, 0x0, 0x0}) 18:33:21 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000180)={0x18, 0x0, 0x1, {0xa50f}}, 0x18) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="7f000001e00d47d1a0000000090000000000000700000e0f7f000001ac1414aa00000000ffffffff00000000ac1414aa00000000"], 0x34) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x400000, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000080)=""/25) 18:33:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x133, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 18:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) [ 971.443548] binder: 14376:14383 transaction failed 29201/-28, size 0-0 line 3255 [ 971.445964] binder: BINDER_SET_CONTEXT_MGR already set 18:33:22 executing program 3: r0 = eventfd2(0x8, 0x80001) fchdir(r0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000040)=""/49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) r2 = gettid() r3 = gettid() getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000300)=0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() sendmsg$netlink(r1, &(0x7f0000003e80)={&(0x7f0000000040), 0xc, &(0x7f0000000180)=[{&(0x7f0000000080)={0x34, 0x28, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x4, 0x4b}, @generic="f7461833fc39825d0de50067c9d018ad86094644c79f301c670ff1758db5"]}, 0x34}, {&(0x7f0000000480)={0x25dc, 0x12, 0x708, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x14, 0x5f, @ipv6=@rand_addr="f4cce131d68c7e6f05de96bf1132ba2b"}, @nested={0x198, 0x7c, [@generic="df2febefc232126fded6143849a7c0461b4e86fc0235f4b72c3f95b9d494507c15c5adc7615a26eefca9d61cd3a64b01f6feb1976f8c4e6914c5e9c20cadf35897fe8857f302d5db2d992da3115649aec0a96fe746690e9a4289727ad6efc84fa633bea19e5c99523f77aeb5db677c28091a923e", @typed={0x14, 0x3b, @ipv6=@dev={0xfe, 0x80, [], 0x14}}, @generic="1f536c56368078e027b40cfedd3c5d1cc4ff9f37999eeb168f402a5660cc258e1eca646bc5e3ed305f0a53494de0af97eae01be0b5457f88bb59984f31234fe8893237274759cd6a2583246a8e7180ca807ff03e326080ae7d2caefcf2c09b4fd0def602e3b9be7996ea75a359f6ee4d29883152259d08ae9e065275dfc9c77f9c8e479e724b7be16e13fac3c12a24320d37b1b8aecd19cd86ab3b902b7d2bf46ffe8cd6bc0815e0a6ec8c8f3c7f2a657bdfc603f3c279a8095e02d3e64aa57bc34ec315d6293a5e1ab0d275ef0c56f87612d4a917a2cf877d9d6ddc59f803d50d3d5f", @generic="a632d471d522f5044d47b62eabef7368c72e", @typed={0x14, 0x55, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @typed={0x14, 0x48, @str='/dev/binder#\x00'}, @generic="fd7ae46da2f7065222a24ae269a837aee72694872a21fe57ae7aba5742c1818a4978bb3db1b776c21d3266d7866d1093b09b353856276f8cad6ead6f953ec912161a57af2c9187bc9c3ff449e57f44876cee0e11b7e16803da308440c6a479fdb446bc067df7946d4fd183420517a01393075336160ec957c82985467b69c6f13a8332b914950183d60f69", @nested={0xc, 0x6e, [@typed={0x8, 0x87, @pid=r2}]}, @nested={0x178, 0x80, [@typed={0x8, 0x69, @ipv4=@remote}, @generic="f6116a1218825d8e75ae3d4a9bc137211ec5d74d270cf2be6216a3cc2369df8eedbb024dd31967886322479a1f9d844f2b3b435f04c8c31ab4c8248ed0d46aad5a4b38e3f2ab1aa4991a4c3380e713f500d9c5c326507cf85be230dbfbe4c14d7c3d398fc59d793aabb84f6b6c89c4f0217d607506645522", @generic="9b1c87183aea801c50768b6a6837da9161f3b0a7581c767bdce2e3ef264fbcf3d510f357b4cbf19127f435dedf5f74bf6fddcdbb349fd6abcc6fa014727026afcd4701266b9d68d8af4d041702cac1703863c52ba21ea041017e0f8352b1a1eceb5cc9f5b3849414f1c20870ea668b85165cbc5eb809fcc4b07cf40b04c8ec50f8d8d24deb7e7594c9a491e37ca73f16bb907186c6f792a0b2b18acdd96fe3c2370d5ceb5b542cfd8805d5d90b8be9c1de5d4fe70b835db98f248f227c69090fd3295b1cafb5a61b0a62", @typed={0x8, 0x69, @u32=0x8}, @typed={0x14, 0x32, @ipv6=@mcast1}, @typed={0xc, 0x84, @u64=0x5}]}, @typed={0xc0, 0x84, @binary="b01f6c7f2a248d628e1237d7ab0b657acc1c50638a07973e93f95e0889055e6c322c1d6cd22181e6dba5f0466f274685f623968148f050f460faabd243b4ca3f1847889723a6957154e5559e2e5a472af85633f1b0f846033ed822142bf5e1b4db9d6fdb5520d399fe81ca8e2cee6f2c7e18917bb30305b37822450c51b131b6515569ab12f2056ace169a72ff9fe00035d2a941ea043f94d8cae312e2e49a28d3e8934753aac2e3a79dd4c1ea68dc36d1494236d5fcbb4016"}, @nested={0x109c, 0x38, [@typed={0x1004, 0x76, @binary="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"}, @typed={0x8, 0x44, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="b22945b2675f730cc94bde6ac99267a1b1c070fa135a5e6ef43202d740c5a70866b53df5dbb0910f982e590a7130f7e22530ca79042903b74f1b221457ecc36053fe7b9d9db1f85a23ff8fd7cbfe6bbb0b5346cf140768e589e9bb3009311a5159be8fb1e837773e9d159a1562177bc46c9d381b", @typed={0x8, 0x6e, @u32=0x40}, @typed={0x8, 0x7c, @ipv4=@multicast2}, @generic="7fcff9c677"]}, @nested={0x10a0, 0x8c, [@generic="744cce8f6bb43adf2b32bce54537571af8cce36a49a82b9ffa8af703b902847c95848757ff9b88d96b5e8fb4d44a2196f9884eeb68", @generic="fd73f7a85ddd9f6df69f041e2263a5e6a29af15d72c178f43e88d7339a67a608cb151dd4158ee84efecc93fbfbc95af531707a6dab382d6ce9f998", @typed={0x8, 0x5c, @u32=0x80000001}, @generic="63ddd1850e7e81f41697894432b442ea769b7392b477dd7d229cc811c500e97c004f035d5ffd81d513beab81560d2ef387a87cf006e6baaadb81228d9fe8366092be903027274238d639328f1f193f57bf341b3b8fc197c24df5e2d3287d40507326e57a0708942074c2a766cefa31eb33a5b36844330381c341019395fc57df0e1d1bf45d712ba7e1b3896dd2c00d87dde05caad5aec885f1c0f178b1837d88af6d626f6e3dd550ff2e5150f97715d9eb9e7b7a2fae15d627cb4d2c2f8fec82b0a9ed3d1cf688e221500206a26c0809294ee65d23c61425e567e516ade5442d9731e2c72b6297b5ecb4690fda9c5a056d2f42b0d5cbb0bad8fba70cb0210ecd8431d840d306abc11297c3882d5519e5e344e63e3678df4321e44507f5cb9e9065a90b5baf785e415637899a833dc01943f189a41c4575f5873d045ee8b6813abdd386e6b9994e5b5b9bf21da1fa47a554c5c06871eccf4a9e8b77286ad0aa4eefed8d26adbfb97ae87ec05bd75181f8a08f49fad1f4cbf473733e44037ff38c0e32348b33439fbf8d1788d0a79c653c68f8d84cfe8e8c7c019f423b560a374c24f27a720ded2a8df28ef90db39fb8116f40d2e6925c99b9d90a7e0434d631b8ee4705c81da3abbb91bad0ccfc295663f18f0f758f3df887e9a285775270fc74be632e128fe0ac5a5c3c81dde2914f8ed5c3d0dd51236651b87130ff9362f45aa1f509ad0f657f8405f992a195ff0c76058b6dd5b3cbaf089eb204ba2831733b49892a89d928d5510499d9848fcdfe39f70cb2d771cc4d73d03e8587671738bbe29ee6ba1497b2202eb5a9ed57809dd27850e41efde4192a5982ee9af44667ab83264acee6f3e1e6e228cfa9dcadbb21ea6380429d8a3cdb16b190865bc1ce8148a4eca8f852c9deb31ef4945132737a348b233b71eeed7b40afa428b9defdf7fbf929007440c662b6342e62549562f680402e0a33a4b07883d462218bf4f02b3755bbdaef267c0e7b80704cff66c2655da2af4afc21256efd924d66c9530864810d836ce7bae5d93b730f58385ff8d9541a0e04c158669d1a4eb432615f19fffc37323e1b2674658009c22a77a83bdff81c70385b253ca7505226c1308181bd20f2c889cb3caed159a1b8a627313b9c8a30e74e4fed4dbab9eaaf8769d4fa966adad3de3a09823a283a4d6024c11ca5eb244fbc86c4528a1cd5c2590e664d22045090b825a9a62bc11d0a1bef0d2c4bef6a648147c53602ca2830c4757b3d21cbf5bf30bbfbcc93139f4b13c31bda1272d14809ed6d48511cb87ddc4bd26d314dbb72dcd5c049491732cc4622008452bcbb619aed438b65ed2d5c9933ffe352e40e67dcc9ec1f99f643303a730ced90bb80508cceba1bef81b9c574ccf2f3d197922de28e9ce0b2858563f5022f90705c5a5981fb7437e6787eaf666370ac1dcccf8c1bf1ece6582c135b68d219708940ce1ec49bb4df4e70ff0ef700a9612a26fee58edc07e1cd61211f22ea86e4724c306858c7c4c49873df190b1723a5f900b942772ffc48aaf73ac89118b962cf593bb82502a05a3aab5839e0c2181bbe9bf4d25e2106495784ae7657581bdc53ae71254384d4b245dec6d7334d634975d419f33da91d173b9ba3acc09173b4342d7dcd31fd086f9dd19826b32afbd7bdb0598c5ca0a08e7606c5a5d45ce8a5e58132d96fc1eeeba3cc05ccc18c89ab0778078a488dce296e8dbdd73946ee20cdb56550046606c8354a86c98bfc418d3534a72848df9899ce0e754e17a73f6c285cbbce9fd17b1820612aad1dd300268b69865acdc2c1d6ee1aa6e103fbc5672c5efbd9c0c0a264692d8f35e65cc245a8dffba90deb17c25bcee04c0d5dc30ebfcdd648e2af0275de60ae87e975f3eb657fcf9c4f13ac9dff0b8337516b0ffdf9140fbd04cf959a62f8ab6d29f132b95f078c7ad34c7606db436e82b089fef814db0b2d2e835dad99a9aa70a7d8dad8fc4576faf18032a60be6966dfe648800d3a5bb67432bf7d8d0254b2a16948b0a1f0f015c073a7f4298d71ff84a7447a1c2e100151221f22baa4cc91eb43aaa0ba93511ebff19681aadc0d721bcceb8d49b71dc88d20ec3d1f497bd814cb4830fecc374960b003399dbd4969a8da7d65300077cb016b528e9b5868b5199ea1470bae3ce97a4601ac52f532e70d01d5752e347cb2048104d26c41c77401403df174c3bc5d7a3addf3b5bad5dcaa8f2495200292f8878c806074415945518ff5194a552fbb9d77e8fb4fb64c3a38a18056448c0d95198c34a92157dbaea9bc2172dcac8a12aaff0b6eec77653133f4361bcfa2e255115882cc476da5165835aeb281f12c0990a35642b0ebac8cd5b2ebd4c242caecfc1b544ca19eaffa184210982018de833974073a1cf0beddc43d0f75b645ac7275ea895baeef01100bb6390053cb7b45e37196a49af59c32077cf17fdb91a5b556fd4cbadf873970a6e20172da9b4651a32ef25ff6d97437d13c069b83d6991a5931470d06b74fb49c4887e93045993d950b6449ff07b2c60ae828ffaf1edbd3e59924bbd91341ff0fc5ac95fcaebd214ad173abcb481f3b0860324adcdb18cca3ea9751485e277e9c6e9807f86a85277681061d515b963abfc586c79f161219b8a5396b0162612e0778a3f91cdce1aa614599a38adbc5ebee56029438bc6a261eb5155201b57ac3a7002890a9bf6d7323d2d4b879357265fc24768abf5f55ba3490cab438bbd41b1424e1a22ccf4c9fde26d5243d69d22510c941f0396104aec032cdad69a7b7917cd758a5662f0d49b73d4af70fe5c73c289b95ba4e048e4e2e295c603f35aca6bf851a7144330154cd5a27ad6938fe1956ff720ebd3651ca8452ac7f624b8c25a129fca89c73ec698e0135608a88a6d46be0c294175046fa6fa43e1efebb999e19b598e393003d8bc57c2adf87d6856dcbeb52e64d1a674a42271e82e53720340650a131071414897cb724251e91b7d04909c3d81860358682d90f9175ca10afd9510c8265cc0f8c5fba418c6034497e2fecfdc22d899ee63b762805f5424fd73c1c578767f519d450eca8cb1cd7821542dba548933ca7e50fa43348f9c27ac3e5e14dc0efef0ae3221d8c0a6a74f61cbca48b262e2a54661c12cff68c19187bd1324c1eacc373bfadcb91aa24dee8fb95a2f3184848742ea249f99264a50c1f71c75e17bb7a1e2ee1746c0d5bdbc272599b59ecc41f1ffd601196d94c1933165b779792278bb98b3e8b9cc97021294052b0afa2fe38f66244175cd45f9ba8a28a94e1166f82963a7c0648d9148afda11b0b25747548b584890236fa66c1573c5fcd6e3d81936c1a794487055c697f01601cfc2507a02e7dbab3b43aec5e565418c0f3042db1adca91e712fea928901b980250bba1319ff52584662aafb2334933cc82ea60eabad9c7af11e34e048d58376e67345280b1bdcee84df12934461e73eae39db328542e6605c19494800d2a996ca8dcd6f1f8b3885b889d6ccb930d95509da8031fd4b5abb5c65ac25204f6d1e3d684db06e99264c32d936f9f928ffbbe339cc7a5cba7f176f272c7d70af843f8420d77013442bfac3894c93ff6e6a74b4d86bc10befe243545d4331e3e53dfad77c1032c3a89be0c38f66127b29627bb5615d1fb82bd9f8f0e5cba16d7c14e105f3f1aedc0c453c866781eb121ad26358c79b7769d82eea0af903354daae2bd1dc2b63d36de07d15b3e950d88f203b5cc588a8f409bc7ee0244eb38322b234db650a5464ac1d6ed00601aa32c6a9c130e5e3bbeebd65715053fe01351fff3496b2dff4c824fcf0e632072a6e4893a8d89f6e48770a3e64e31d5c92e1149f2847b2fbfdf8aee6f775a7475ea53fe68ba5ff1ea8e68e587dd9e7e8d1b649b2fa8322cb21a206103bc3bbbbad12293113396b3e79e4db3a8f1d9e3a7af1a4e55b90f6d6d97f9acb5c34bffc4532aaf0d981b931ec81e466604bb69309cf4cb38b22617bb11076cb10f43bc1fd4b9a0f962bcc148476dbe8454fb65dd55a1348392ac3ae6e562a24f799116301b63649889c380ab9390cb248bfc5c253d1338b4880225088c7740da48579fba9766b2625b36403b72d5eac6c09ef241a7a28e1d0db0fb3c19f564dc3dbc483da5c35bd5725f1c49cfaaf1813b7a91a9ca7d3e1b4f6a55b3c61634667a84ababf58717fcca2c4347360e29e3177eb9e70997fa8a0950da71e76f4b4f2291df9bae9352d501b4bd0adabc340de1a64407feec0d7e8dc51a04048dbb3dcd40497ab050f8d8f8d7d83a5ec7bcdcf5da709c03a6a50af7a6dcdbf2ba29a22cd0eb77eb10028c03f2eb9ff2d9e00d11dc9547c526d346d826e9023e5457cc1e8d9136eacdcd21418da748b95d61280d74f0e23f2426be36ca0971b7e1940ab72e315ed67da0ef67cc79b5429fe1babfa1be94a1cae8a41daa9bf1bfd7bbc6e71549ef25ab7dac68616de6137c59832ea69bd09e7ca4ad39d84672ff1a71ca89500505bcd00509d36f0d1bf445cf5dcd2288e9ab22d73cdb6551ca25dbef2e07a2fb7dbce450a1731605cd1d9e451e717488e1f8a069d41a8ce3817d1415fb3f5614c770fc9ab05662da69b282363a51677d18cedab7a08c525a04549b92210d42c1e8336988208ceb00d8f0dae4d0430c205ccbb044414325d725bdad97cb3f154d17808ce03394ee8a644b95a078d4029a1a883403860832b2cb2ae14957688551809bc38e8da6c910776a24db346a9d1aad9a85fc76536d3fc1691b601e63c92fc104d3355955eab1a8be6b8985e39ad5e07925d35affd53911afef54a405be6512be50d881bfb0c9630f053dbf815146e5e4f0e430d3801d7eed802e68c7ebc5708a3e760669fa218ee0bd9fc6c6ef2d5aa6f05497b60d55f27d979448efe453a34d10bb61005c11e45af1007b2b63c83990f599d9a4991e92445d798d76102f1f47ab02c50a5ac8555667dbd59a3297bb69fe19a761519ef45f165f73f699a523db29b02900a89b29af461cce9c9fec8b667284d78be29fc7ef24405e55efb716e4e2ad0e6e876d0d33e691af49f9fc56ae7b16ea836e5f72d497e5c309b39e49addb0a043ac63d8c875eee2bfdad8c506ca9411b52c0ce14042661a974b417cbfd925ef54e2ba89e8926f755f9d4663268aadd2c0032c6a462e80eb655cf12c1f17bb2d64deb752ceb8ffd66819b062b389297b0a7a8b208b766d15c4d138730b3b11125bd7bc8d7db4fa83cddb8cd0494b0fdadd0736bd97074c856f4f74d04d846e0bc6330c298925f5254eaad78f46e36b4d80b9b4dd0bb16b7e7917453ede40ea1023b117f310f9ee1a73312e1cd9ceb583c9d51cdc770c8326426a037548c6e08ed166e6c93392e742c967e835045b2668b8f5173c0059e742471971ca870b713f8ee90afbc663543b2d2ddd0b0b74db6c89b5108ea2148e2d1065dc06d53482c6c4d5dd811f40ad1362a86cc6d23657c965695cb92271980fb6dbf95c0b9f5c9cd075399bfeee9f6a5b69511e37c42d4a11b2551654c21f1366b46ebe6be49dd711b8b97113a0361e2b9efe99af6f402ba09ffb69f0d35e765ecd31ca2eec71f3d7ab81f1d2c939b3cfa68c122b6af286593fd3d31f23c6d0c050c79d1d7ca0a5397811c2a44faf9abf1cad8c729aba1df919c417187e603571250bf374547b77388d4ff5dd5f9d63938d75a37ddc83e758259906db23d07a893f8826b0b12f2c236bfe0ad840f8ef85453fadd44e106bffa6c61ea2bce776311e922d160001367e8a035ceb2", @typed={0x8, 0xf, @str=']\x00'}, @typed={0x14, 0xe, @ipv6=@remote}, @typed={0x8, 0x7d, @u32=0x100000001}]}]}, 0x25dc}, {&(0x7f0000002a80)={0x1398, 0x32, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1388, 0xf, [@generic="2f484b956dabf5c6295042288832844cddd13b30689d9962d43461e07afd6ba91fc76a965839977601f93c80478c3dfefb60e5127823884b2fe372fe48cd24438e3c10f01133bfb514a576903b9bc758e99167e06b3ee27bb5f70b865d267e1352b04f7b038bc943db82eeca06c92c01844c84f3197bf7c9dcf75f1c3bdcb7c4a755234cc0070de9efeefcf04b306cbd5a79e46061fd171c09c0c236a29851224c6583f0a158d224259d69efbd04f3497d2261108ade910714d81f033571f1e469ecab14db27b5bb400bccc9113e3293fa87f6cca4cf9a03b4f6b113f02a17278562441d", @typed={0x8, 0x14, @fd=r0}, @generic="5420ef5afe5f1ecdb2b2c4184d6859b4b602bab34636bbe55f6281be27e11a29651e63427df1eb93317354cd2eafd798f0d5f0e28f4181bfb88cf1767a55f2f162c55cfcf297", @typed={0x84, 0x67, @binary="15fdebc59708bb0d3a33f2a501f5af0189b5c09ce1a0e7e84920fdadcc52fd2b592712961d6f608274356a3f649e82be45968cee81a6d662e9e938570fbb69bfe91972173c59094a5fe34f8b0de2bdbd115481fa2e7d23a92b677ff1da32d5e2275c574452ccdc4b1bf8564dc869827dc5052f06312f8bda4dd535b1cfc1"}, @typed={0x8, 0x19, @ipv4=@rand_addr=0xffff}, @generic="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", @generic="1937e26c72b253b20ae172543bfa6c20109c6fa2d5b7071cd6b78c0494a90b343884233319c7d502f85be23080aa8ff7f66c8f932cb5e1733d601ab97b9547377488fb2601a93bdda196273a1aff7e3f81818b85880330fa438b6799429d9ee8f6487c59a210ddb66b1b3b9f764568", @generic="5fb39031fff38432771b47791398b9c9148af4cd305cf13c304890f64312807a505bae363eda9486cb2589e129605cc9fd2ffc590dd33f71d420fbf0a996a4484f0fb431731f01032859520b22d27ba2a63e38604c69d7523fb3ea853fda4dbe7ac004ed2ad3fd4ed7e969ed04b168f663b42b18229885623f04fa5fe46779fdec6ceff2571c905bfbd2146c4497581cb8432e28860a20a0d2e6f4f34fcfc32834afbd3984ddb148d31c117b88e9c21ea1452ac8f4c4d8882dc49a6ca7704f58d645bd31a38b22ebd78a9028de471768cf5f26ed6fe29fcd8982578b0289706a8c2ea7c6fae19cc8b4a1", @typed={0x4, 0x6f}, @generic="a8d718ceeb9c23cd8c3e1dd858853c1fb3d367d5d37e7bb8a6e1559ee201a93fe53960e02e7fdd20580f2026cd7d81fbd1816e60ac1e56271a53b64234a9fd731708835899a2fb4c2ff0293da55e4ddb95a3771ff75d5e82b9d7840f0b81a4993831ac15c857"]}]}, 0x1398}, {&(0x7f0000000140)={0x20, 0x32, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x10, 0x25, @str='procproc\x00'}]}, 0x20}], 0x4, &(0x7f0000003e40)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x40, 0x40000}, 0x80) 18:33:22 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1) r2 = gettid() syz_execute_func(&(0x7f0000000100)="c4a1e65d37f30f38f6cd674329f642d2b8feff0000c4e17d1029c4e10e10d3409c64d736262ea767450f0ff4aa") timer_create(0x0, &(0x7f0000000180)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401104000000016) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28}, 0x28) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000000)) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xe54a60194b8c48, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000700)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000740)=0x14) recvfrom(r1, &(0x7f0000000340)=""/180, 0xb4, 0x10000, &(0x7f0000000780)=@xdp={0x2c, 0x5, r4, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', r4}) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400008000000000400000000000000000000000001"], 0x0, 0x0, 0x0}) fcntl$setpipe(r0, 0x407, 0x1) [ 971.445973] binder: 14377:14379 ioctl 40046207 0 returned -16 [ 971.446718] binder: 14377:14379 BC_DEAD_BINDER_DONE 00000000d7d40000 not found 18:33:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x7) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x8082, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000200)="b0c09b0913d51df2561bcc02aaa964dea330daba409472c9f803fd0e14533a41b24a403a3dbdaca6b0c467597cdbdcd6eff0100788a3a9f68f157446e8c651a6374781e5f9b37b072abe3f17789adfb92bffb49fcc0404647e58f74a2ca1ed3ec86db8a4acfd04be46dac45d853830d92b464c6c1bed71b4833517ed88b37a1b4d11650c826e09", 0x87, 0x1, 0x0, 0x0) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) [ 971.448773] binder: BINDER_SET_CONTEXT_MGR already set 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) 18:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x2, 0x0) r4 = open(&(0x7f0000001500)='./file0\x00', 0x400802, 0x48) pipe(&(0x7f0000001640)={0xffffffffffffffff}) r6 = dup2(r0, r0) io_submit(r1, 0x7, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000040)="2df07a747b97f3542976928fddf7169d94864b5edfbb2527000b74dc594e2d3028c7d540d2b9313363562f144e54fb57f073cb78b3bafe6f45121838f038f04954a0846475d1204677c12286096c7329691be195bbc18fa0450822d642dcee8dc8ae87ef84a22eb515170732b5659972d969065d795c4376ee", 0x79, 0x4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x3fb, r0, &(0x7f0000000100)="c74c5c3aed7780ea3427983384761207e00230ddd41f224a9946478b5ab3cdaff9974606d6539087667161e1162e4dcaead5e887b472bf", 0x37, 0x5, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000180)="2154e1e61c1cba476adbaac618801cba0573fb200b69deda4a81e54c", 0x1c, 0x2, 0x0, 0x3, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000003c0), 0x0, 0x2, 0x0, 0x2, r3}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x6, 0x74, r0, &(0x7f0000000500)="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", 0x1000, 0x4, 0x0, 0x1, r4}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0xf, 0x2, r0, &(0x7f0000001580)="93489016c5292e33b985d2151fab6e61b20480c4c34748fcd29f4290f445212139762722be740bf449496393fb940770210c0a71e2ded09cbd796cc857e99cc4fc70999aaff962008b7eb0db88fb5d5a8fb82eae5977869dc3d9e1b579cb251c4b146c474bf904bdd27d7cde1a546d7289b97c5bc92d50c64a2c35dbf85444b5bc4344063f064675114bf2c05748d5ba81e9", 0x92, 0xff, 0x0, 0x0, r5}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xfe54, r0, &(0x7f00000016c0)="0ce7bf5b6747c801137f1b2cc378a1dacb1557fa", 0x14, 0x0, 0x0, 0x1, r6}]) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000003c0)={0x0, @aes256}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 971.448781] binder: 14377:14379 ioctl 40046207 0 returned -16 [ 971.456457] binder: 14377:14379 BC_DEAD_BINDER_DONE 00000000d7d40000 not found 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0), 0x0) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840109c00000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x2081fd) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000100000058c38dee55000000000000000000010000000000000000000000000000000000000000efffffffbeffffff000000000f0000000000000000000000000017000000001296108922c2589ab1003022a875b69ee2814e02af5f7131ecc5ca06a14c0d6b4b755be7135d38e6c6ed59c5a10877eff40717447fe7f8e6ec45464bfeea64592e6ac221017531a5dd91972c4da287c04dd78ad7d90ff2ae6817f5ec4e2b0349cdfd85a1fbf595c7062ad5"], 0x0, 0x0, 0x0}) 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 971.513265] binder: 14389:14393 ERROR: BC_REGISTER_LOOPER called without request 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0), 0x0) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xc4c6, 0x2, 0xfffffffffffff001, 0x1fd, 0x0, 0x1, 0x2400, 0x5, 0x6, 0x1f, 0x100000001, 0x9, 0xfffffffffffff96d, 0x3, 0x40000000000000, 0x1, 0x5, 0x2, 0xff, 0x1, 0x7, 0x2, 0xffffffffffffffe1, 0x7, 0xc099, 0xb1, 0x5, 0x0, 0x200, 0x40, 0x4, 0x8, 0x4, 0xfffffffffffffff8, 0x6, 0x200, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x800, 0x6, 0x8, 0x9, 0x2, 0xe817, 0x5}, r2, 0xf, 0xffffffffffffffff, 0xb) 18:33:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20080, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) 18:33:22 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000001c0)={@local, r1}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x11c, 0x0, 0x0}) [ 971.520828] binder: 14389:14393 ERROR: BC_REGISTER_LOOPER called without request 18:33:22 executing program 0: rt_sigprocmask(0xfffffffffffffffe, &(0x7f0000000000)={0x20}, &(0x7f0000000040), 0x8) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0xffffffff, 0x2, 0x40, 0x7, 0xd, 0x7, 0xca, 0x1, 0x9, 0x8, 0xffff, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 971.725199] binder: 14414:14419 transaction failed 29201/-28, size 0-0 line 3255 [ 971.774181] binder: 14414:14419 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0), 0x0) 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:22 executing program 3: set_robust_list(&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x101, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000c700c7cd0000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:22 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x1) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000480)=""/4096) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x34001) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) [ 971.921301] binder: 14445:14448 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) r1 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) mmap(&(0x7f000059f000/0x4000)=nil, 0x4000, 0x800001, 0x4002051, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$RTC_UIE_ON(r1, 0x7003) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup2(r1, r1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) ptrace$getregs(0xe, r5, 0x3, &(0x7f0000000200)=""/94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0xffffff92, 0x0, 0x0}) 18:33:22 executing program 1: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r1, 0x4}], 0x0, 0x0, 0x0}) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 18:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xa110, r0, 0x27) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x101010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x1, 0x5, 0x6}) [ 971.928080] binder: 14445:14448 transaction failed 29201/-28, size 0-0 line 3255 [ 971.971668] binder: 14458:14461 ioctl c0306201 0 returned -14 [ 971.989950] binder: 14454:14460 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000), 0x5ff, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x64, 0x0, &(0x7f0000000100)=[@exit_looper, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000040)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @flat={0x73622a85, 0x10b, r1, 0x1}], &(0x7f00000000c0)=[0x38, 0x78]}, 0x7}}, @dead_binder_done={0x40086310, 0x3}, @increfs={0x40046304, 0x4}], 0x23, 0x0, &(0x7f0000000180)="94aa02a4d8c4aa4c63b518750578eb2f287370c8d887d46095933cf8741514405451e1"}) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x100, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x0, 0xb, r1, 0x2}, @fda={0x66646185, 0xa, 0x1, 0x1d}], &(0x7f0000000100)=[0x58]}}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x30, 0x38, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000180)=[0x0, 0x30, 0x78, 0x78, 0x68, 0x0, 0x48]}}, @reply={0x40406301, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=[0x48]}}, @enter_looper, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r2}, @dead_binder_done={0x40086310, 0x1}, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x1}], 0x1000, 0x0, &(0x7f0000000480)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000862156330000000000a1473f410000000005000000000000000000704406daaa6aa38ee1a2da6e8e00000000000000000000000000000000fbffffffffffffff00000000000000000000000000"], 0x0, 0x0, 0x0}) [ 972.024044] binder: 14462:14463 ioctl c0306201 0 returned -14 [ 972.050877] binder: 14464:14467 transaction failed 29189/-22, size 0-0 line 3118 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 18:33:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x106) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) readv(r1, &(0x7f00000000c0), 0x0) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="ee68c0249602db13a8e6eba2e0a610dd1fb3cc5c0f2dc4a81fa633e5dd77cd4fc0c40496da85250cbef072be8657bd237b6bf14b3d4ec3e6de7f31d6381cf7653684e724f960bc361892b807c278823edbabf7d1b919e7f6ed0088da6ed7f41bacd9aaf4dbcc5251ef53723633e6330ceee55322697cb3048f62cc4b13608a2617a6ca38d784d36c5a8e8c554e6bd5d0a17ce3a1cca656c36e3f1225882e59dd1abc53036fc735298f21975a", 0xac, 0x8}], 0x10000, &(0x7f0000000240)={[{@data_journal='data=journal'}, {@test_dummy_encryption='test_dummy_encryption'}, {@journal_async_commit='journal_async_commit'}, {@nodelalloc='nodelalloc'}], [{@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vga_arbiter\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0xc110, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff02, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x4}, @increfs, @acquire_done={0x40106309, r3, 0x4}, @acquire_done={0x40106309, r2, 0x2}], 0x851a3a4f, 0x0, 0x0}) [ 972.064899] binder: 14470:14476 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1167484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000059e0000b6681680000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = dup(r0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) recvfrom$inet6(r1, &(0x7f0000000140)=""/193, 0xc1, 0x101, &(0x7f0000000240)={0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast1}, 0x3ff}, 0x1c) 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0xa2, 0x0, &(0x7f0000000140)="690bb0aea4315b23551e4c1450069c7af20f47e7b8b07566df49157ce71cd889b203ebfef86fcb3abc014c7236d2aaf43db00be26dc276d31b5b0704218cf4d81cd01ffd36fb9ab727656a6d2cf7a726b36762b2f1e9b2568d16118667b85c615e5c23f7764b7648c125233eea410c657698846dfb99ef43e6ef76f6c0a9d7f96eb5306e6c5ad696f8b6088fac86e08aeb8c31944b94f8675110452baa8f0feae185"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x280080, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000002c0)={0x5, 0x0, 0x200, 0x806, 0x1}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000880)=0xfffffffffffffe70) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) inotify_add_watch(r1, &(0x7f00000006c0)='./file0\x00', 0x2000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000a40)) fchownat(r1, &(0x7f0000000340)='./file0\x00', r2, r3, 0x100) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='net/raw6\x00') ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)='sit0\x00', 0x80000000, 0x9, 0x8}) getpeername$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="11634840000000000000000000000000000053ab7a76a91c7b98b3ec042b805aac50a6e5866e31b1cfe8c5946e39aa0c8cf2de6b1ebbfc93e2c238746fc0743802935453b1dbaceac69722dd35c76e3cb8b3c6bc9bc6697ee14c42ab84cbe7991950f9b552bce50d5ce09ae2678023072de32c39dd0f89a82b5c9ada76be0ae12416cc44a0fb89b016d9e5d5688e23c4754c569fd43ce80e91d5142673e2b00e65b7ac0d8027837aca36b0050e7698a12500ffc4dc93bcd430d48e506a069063182a23cc51"], 0x0, 0x0, 0x0}) poll(&(0x7f0000000800)=[{r4, 0x2080}, {r4, 0xc000}], 0x2, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlink(&(0x7f0000000300)='./file0\x00') setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) getresgid(&(0x7f0000000380), &(0x7f00000008c0), &(0x7f0000000900)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x9, 0x7, 0x6, 0x0, 0x3ff, 0x801, 0x0, 0x9, 0x2, 0x7, 0x7, 0x3f, 0x3, 0x51, 0x2, 0x0, 0x3ff80000000, 0x200, 0x81, 0x9a, 0x7, 0x101, 0x8, 0x6, 0x8329, 0x83d, 0x74b, 0x0, 0x80, 0x7f, 0x7f, 0x3, 0x2, 0x1, 0x0, 0x0, 0x7, 0x7, @perf_config_ext={0x4, 0x7}, 0x2100, 0xaed, 0x839c, 0x1, 0x6, 0x8, 0x8}, 0x0, 0x3, r6, 0xb) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) [ 972.064918] binder: 14470:14476 ioctl c0306201 20000440 returned -14 [ 972.095184] binder: 14471:14475 ioctl c0306201 0 returned -14 18:33:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x100000000, 0x401, 0xf56f, 0xb4, 0x8, 0x2, 0x0, 0x1, 0x90, 0x40, 0x2f6, 0x7, 0x80, 0x38, 0x1, 0x9, 0x896, 0x40800}, [{0x6, 0x2, 0x3, 0x0, 0x100000000, 0xff, 0x5, 0x5}, {0x2, 0x100000000, 0x6, 0x1, 0x9b, 0x10001, 0x200, 0x4}], "1c355520a778545759a1a289af53b57a5f39f978fe9bf37c215e6f7d5ad1883f5156d132fac65ab2f05749ab2b176bc009f3a312ab94cb9c560eb15c6e1887a10a06c3350849bf77b3a0468f088c848f2785ecf6f87e16f51f4fa3f2ef8cf904c602df3a63cdf061a5602c343c9046d985c795e62d3a2b4a0872", [[], [], [], [], [], [], [], []]}, 0x92a) sendto$inet(r3, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 18:33:22 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/79) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 18:33:22 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/237) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000ec00c3bb220c0656df671d000000000000000000000000004000010000000027a64f5adb3a8bc5424497646a6d6800000000000000000000000000000000000000000000004c7d91c293ff00000000000000008b058d5f854fd1241585dcd7714b2a8c882008097a080f17e0794e2e87a2f2369394c9e704bda719b689d61a654a8d2312d2b35723615854695db76493bee09ee6d7c04a4466e52d834d7ecb65dd6e130c2c03bb69d8c15da55b906d609f48a6a4a822e2dba4a4b2834724b41be7eaf70ec5d20f835a3c1a71c65006b357401064a17e996fa3a4947d570384414de6b5c022589887befd5e8a419d1b5f11c957aef976cde6d14980c62d8fe2a95f793c018dc9d9410fd65b5015ad8ceba5fa1b219989a473065373cef97912d66e44723919c35149ee46ae065c27af4142f5920b20ec1fa95ebc"], 0x0, 0x0, 0x0}) setns(r1, 0x0) [ 972.116432] binder: 14477:14479 transaction failed 29201/-28, size 0-0 line 3255 [ 972.121372] binder: 14477:14479 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=@hopopts={0x2b, 0x8, [], [@enc_lim={0x4, 0x1, 0xfbf}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @rand_addr="59d83cd0efc015b5de98313670ef7384"}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0xcb}, @enc_lim={0x4, 0x1, 0x9586}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}, 0x50) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0xffffffffffffff8c, 0x0, &(0x7f00000000c0)=[@decrefs], 0x0, 0x0, 0x0}) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffe37) 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000003fb5a5fbf900000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f0000000140)={0x20080522, r2}, &(0x7f0000000180)={0x1, 0x80, 0xffffffffffffffff, 0x3f, 0xffffffffffffffc0, 0x8001}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000001c0)={0xfffffffffffffff7, 0x10001, 0x7, 0x8, 0xd, 0x1, 0x9, 0x2, 0x8, 0x2, 0x5, 0x80000000000}) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348eb5dbb451d7594966544c9f2ae1361400000040000000000000002000128c94cd7ea49f63d81934db0a2edcb100e78e72632a1b6ba7c33bef471249c7b0d4ac9b1af2cf90aef835fc5bff72bb02038acd61f8e"], 0x0, 0x0, 0x0}) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) [ 972.124752] binder: 14477:14484 Release 1 refcount change on invalid ref 1 ret -22 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000020000000000000000000000000000e7f1947057d38557ffffff"], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4201b}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="30fe5c68", @ANYRES16=r2, @ANYBLOB="240228bd7000ffdbdf2512000000e800010008000300020000002c000200080003002546c878080003000900000008000100030000000800040003000000080001001500000008000300010000002c0004001400010002004e21ac1e010100000000000000001400020002004e23e000000200000000000000001000010069623a687773696d3000000008000300ff010000100001007564703a73797a31000000001000010069623a69705f76746930000044000400200001000a004e2200000008fe8000000000000000000000000000aaff7f0000200002000a004e220000000200000000000000000000ffff00000000010400001400090008000100020000000800020003000000"], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x1000000000010) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x3}) fcntl$getflags(r1, 0x409) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0xe457, 0x1, 0x0, 0xfff, 0x4800499}, 0xc) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x81) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10002}, 0xc) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000340), 0x10) 18:33:22 executing program 4: ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) [ 972.129732] binder: 14478:14483 transaction failed 29201/-28, size 1481034588760091245-600762180983263922 line 3255 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000140)={0x129, {{0xa, 0x4e21, 0x9, @rand_addr="487adf72d5f19bba7ba0dd4422eaa265", 0x2}}, {{0xa, 0x4e20, 0x7, @loopback, 0x6}}}, 0x108) 18:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x803) ioctl$FICLONE(r0, 0x40049409, r0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="616428387287f335977b5ab6576c0e2321202e2f66696c6530202f6465762f62696e6465722300202f6465762f62696e64657223002070726f6373797374656d656d31766d6e6574317070703070707030432c202f6465762f62696e6465722300202f6465762f62696e6465722300205d202f6465762f62696e6465722300202f6465762f62696e64657223e873cb244c2a2e7b2d2d76626f786e657411672a0a10c9ac1cfcd89715f74b65a642e5d462cddf9997620b1f16dc7fd89f"], 0xae) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030343030302c6d61736b3d5e4d41595f524541442c736d61636b6673726f6f743d5d2c736d61636b6673666c6f6f723d2c646566636f6e746578743d757365725f752c7063723d3030303030303030303030303030303030303036cbb88513345164d4a0c11afb4d2d2c00"]) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) 18:33:22 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800000000, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x2, 0xfffffffffffffffd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x9, 0x15, 0x4, "db479d47a097c553075bd1d8e6c0ef0090549a873d5a35465d4418969c1435416300f348945ed4b9cdb785cb17f1d2f861337d50634ad91b0295c3827bbb3fe9", "10ef7128f4b5874ac037219968379f85b0efb60d4194bc39f3593523e16c5ffd", [0x8000, 0x3]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000480)={0x80000001, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) [ 972.218088] binder: 14500:14501 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x2c, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ptrace$peekuser(0x3, r1, 0x6f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) [ 972.231142] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000800000000000000000000000000000000000010000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000003873b2897518c3b9e33ca8cfb0facb316bc0868467d9c35d59ea000da45eea4500000000000000"], 0x0, 0x0, 0x0}) 18:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063082788a6f40000000000"], 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000300)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000340)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009640)=[{{&(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/195, 0xc3}], 0x5, &(0x7f0000000980)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001980)=""/141, 0x8d}, {&(0x7f0000001a40)=""/157, 0x9d}, {&(0x7f0000001b00)=""/234, 0xea}, {&(0x7f0000001c00)=""/56, 0x38}, {&(0x7f0000001c40)=""/83, 0x53}, {&(0x7f0000001cc0)=""/211, 0xd3}], 0x6, &(0x7f0000001e40)=""/28, 0x1c}, 0x2}, {{&(0x7f0000001e80)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f00)=""/245, 0xf5}], 0x1, &(0x7f0000002040)=""/240, 0xf0}, 0x200000}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000002140)=""/60, 0x3c}, {&(0x7f0000002180)=""/120, 0x78}, {&(0x7f0000002200)=""/174, 0xae}, {&(0x7f00000022c0)=""/50, 0x32}, {&(0x7f0000002300)=""/68, 0x44}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/53, 0x35}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/4096, 0x1000}], 0xa, &(0x7f0000006480)=""/42, 0x2a}, 0x9}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f00000064c0)=""/100, 0x64}], 0x1, &(0x7f0000006580)=""/153, 0x99}, 0x9}, {{&(0x7f0000006640)=@hci, 0x80, &(0x7f0000006bc0)=[{&(0x7f00000066c0)=""/86, 0x56}, {&(0x7f0000006740)=""/37, 0x25}, {&(0x7f0000006780)=""/111, 0x6f}, {&(0x7f0000006800)=""/86, 0x56}, {&(0x7f0000006880)=""/176, 0xb0}, {&(0x7f0000006940)=""/182, 0xb6}, {&(0x7f0000006a00)=""/193, 0xc1}, {&(0x7f0000006b00)=""/51, 0x33}, {&(0x7f0000006b40)=""/110, 0x6e}], 0x9, &(0x7f0000006c80)=""/252, 0xfc}, 0x40}, {{&(0x7f0000006d80), 0x80, &(0x7f0000006e40)=[{&(0x7f0000006e00)=""/1, 0x1}], 0x1, &(0x7f0000006e80)=""/225, 0xe1}, 0x100000000}, {{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000006f80)=""/129, 0x81}, {&(0x7f0000007040)=""/44, 0x2c}, {&(0x7f0000007080)=""/141, 0x8d}, {&(0x7f0000007140)=""/251, 0xfb}], 0x4, &(0x7f0000007280)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000008280)=@l2, 0x80, &(0x7f00000094c0)=[{&(0x7f0000008300)=""/4096, 0x1000}, {&(0x7f0000009300)=""/179, 0xb3}, {&(0x7f00000093c0)=""/85, 0x55}, {&(0x7f0000009440)=""/120, 0x78}], 0x4}, 0x800}, {{&(0x7f0000009500)=@xdp, 0x80, &(0x7f00000095c0)=[{&(0x7f0000009580)=""/48, 0x30}], 0x1, &(0x7f0000009600)=""/49, 0x31}, 0x100}], 0xa, 0x12000, 0x0) getpeername(0xffffffffffffff9c, &(0x7f00000098c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000009940)=0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000099c0)={@initdev, 0x0}, &(0x7f0000009a00)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000009a40)={@local, @local, 0x0}, &(0x7f0000009a80)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000009ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009b00)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000009b40)={'syzkaller0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000009dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000009e00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000009f00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000a040)={{{@in6, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f000000a140)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f000000a180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a1c0)=0x14) clock_gettime(0x0, &(0x7f00000118c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000011640)=[{{&(0x7f000000a200)=@ipx, 0x80, &(0x7f000000a480)=[{&(0x7f000000a280)=""/222, 0xde}, {&(0x7f000000a380)=""/161, 0xa1}, {&(0x7f000000a440)=""/49, 0x31}], 0x3, &(0x7f000000a4c0)=""/4, 0x4}, 0x1}, {{&(0x7f000000a500)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f000000a640)=[{&(0x7f000000a580)=""/131, 0x83}], 0x1, &(0x7f000000a680)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f000000c7c0)=[{&(0x7f000000b680)=""/4096, 0x1000}, {&(0x7f000000c680)=""/249, 0xf9}, {&(0x7f000000c780)=""/54, 0x36}], 0x3, &(0x7f000000c800)=""/134, 0x86}, 0x5}, {{&(0x7f000000c8c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000edc0)=[{&(0x7f000000c940)=""/4096, 0x1000}, {&(0x7f000000d940)=""/160, 0xa0}, {&(0x7f000000da00)=""/231, 0xe7}, {&(0x7f000000db00)=""/198, 0xc6}, {&(0x7f000000dc00)=""/172, 0xac}, {&(0x7f000000dcc0)=""/4096, 0x1000}, {&(0x7f000000ecc0)=""/236, 0xec}], 0x7, &(0x7f000000ee40)=""/94, 0x5e}, 0xffff}, {{&(0x7f000000eec0)=@ethernet={0x0, @local}, 0x80, &(0x7f000000f600)=[{&(0x7f000000ef40)=""/168, 0xa8}, {&(0x7f000000f000)=""/143, 0x8f}, {&(0x7f000000f0c0)=""/123, 0x7b}, {&(0x7f000000f140)=""/242, 0xf2}, {&(0x7f000000f240)=""/190, 0xbe}, {&(0x7f000000f300)=""/200, 0xc8}, {&(0x7f000000f400)=""/255, 0xff}, {&(0x7f000000f500)=""/172, 0xac}, {&(0x7f000000f5c0)=""/8, 0x8}], 0x9}, 0x40}, {{&(0x7f000000f6c0)=@nl=@unspec, 0x80, &(0x7f000000fac0)=[{&(0x7f000000f740)=""/193, 0xc1}, {&(0x7f000000f840)}, {&(0x7f000000f880)=""/2, 0x2}, {&(0x7f000000f8c0)=""/245, 0xf5}, {&(0x7f000000f9c0)=""/129, 0x81}, {&(0x7f000000fa80)=""/45, 0x2d}], 0x6, &(0x7f000000fb40)=""/149, 0x95}, 0x1}, {{&(0x7f000000fc00)=@x25={0x9, @remote}, 0x80, &(0x7f000000fe80)=[{&(0x7f000000fc80)=""/192, 0xc0}, {&(0x7f000000fd40)=""/251, 0xfb}, {&(0x7f000000fe40)}], 0x3, &(0x7f000000fec0)=""/87, 0x57}, 0x7}, {{&(0x7f000000ff40)=@un=@abs, 0x80, &(0x7f0000010280)=[{&(0x7f000000ffc0)=""/235, 0xeb}, {&(0x7f00000100c0)=""/207, 0xcf}, {&(0x7f00000101c0)=""/165, 0xa5}], 0x3, &(0x7f00000102c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000011400)=[{&(0x7f00000112c0)=""/131, 0x83}, {&(0x7f0000011380)=""/2, 0x2}, {&(0x7f00000113c0)=""/4, 0x4}], 0x3}, 0x100000000}, {{&(0x7f0000011440)=@ax25={{0x3, @bcast}, [@netrom, @default, @rose, @null, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f00000115c0)=[{&(0x7f00000114c0)=""/205, 0xcd}], 0x1, &(0x7f0000011600)=""/64, 0x40}, 0xdaff}], 0xa, 0x2040, &(0x7f0000011900)={r17, r18+30000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000011940)={'sit0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000011c80)={@local, @empty, 0x0}, &(0x7f0000011cc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000011e00)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000011f00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000011f40)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000011fc0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000120c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000012100)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000012200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000013700)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000013800)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000013840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000013880)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000016440)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000016540)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000016d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010080}, 0xc, &(0x7f0000016d00)={&(0x7f0000016580)={0x760, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xb204}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x8c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x134, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}]}}, {{0x8, 0x1, r15}, {0x130, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r20}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf637}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r24}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x1, 0x1000, 0x6, 0xfdb}, {0x33cb4ee3, 0x83c1, 0x4, 0x78}, {0xfffffffffffffffe, 0x1e81, 0x7, 0x6}, {0x5, 0x401, 0x9, 0x6}, {0xbb8d, 0xffff, 0x9, 0x20}, {0xe5, 0x401, 0xd21, 0x7880}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r26}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r27}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}]}}]}, 0x760}, 0x1, 0x0, 0x0, 0xabd808005cc14262}, 0x4000000) dup2(r0, r0) 18:33:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="74040000000000000000000000001f00000000000000000001"], 0x0, 0x0, 0x0}) 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) 18:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff0092ea588018b2b7515dbf740e1d482331e979e0e9c9d0638d3e92ab90672a30546cd54331a8"], 0x0, 0x0, 0x0}) 18:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) [ 972.246579] binder: 14496:14499 transaction failed 29201/-28, size 0-0 line 3255 18:33:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="2b16cefb0b40ed57646d4583d36e5d59bd611f1e798b6462bebd4de44465f8a024f7b87d7859baee0a0ad3fd158d56d8a6edcdd304109d890f19516f51ed14c75405dfd3fa28d5eb7ae99a4ef54ca79d56f214305181d67923cfc452c08ea43342924cf80f0ee99880069aad0fda2069bce8fbf14a2565a36d969fd5dd2970e1acc99497d96d17d1bba61a5e05e8f58a8552c65e1330c4953049618560", 0x9d, 0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x323, 0x0, 0x0}) r1 = dup(r0) accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) 18:33:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000e931a0bb280ef570c50800000000000000001d46000000000000000000010000000000000000000000000000000000000000004e638452d300000000000000000000000000cc7a5b0460fb285d5bc1c4aeb40ced5d3fac4410be76cf9b42c057cbfe8eeb31267f5fa8071285bf2a2a9287eda2a5dbf49055eb682e6a8f7a4fbeca17dc670dd29af4bb1b6c8c90185db0aeca6c6d0d438fef2c31225879356024048833a3e6b805"], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001840)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000001880)={'nat\x00'}, &(0x7f0000001900)=0x78) bind$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0xffffff39) 18:33:22 executing program 5: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x22) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0xfffffffffffffff7, 0x4, 0x5190, 0x4, 0x5}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/context\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x81, 0x4, 0x6, 0x0, 0xfffffffffffffe01}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b6b51a3c08dd0f6942a6c862e9fe6b673db57164f7b73419b631716fde002a76c7c07e368003258a66d20900cffea19cdfc8028c350da3246b28305a8b034de47e9a961730000000000000044683e99611d9bdc137c49e9530d9ca2acb3f536e5f1352450a9e5183b43b19150e7d5f8a8e3895a431fa0a89988458b46b3e7b77359ca43fc864ae97db7f4e42b13bd3b68084f776a1b7a4374d58ed2251bac6c0ce572"], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000080)={'stack ', 'userkeyringem0~vboxnet1\x00'}, 0x1e) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) [ 972.289367] binder: 14496:14508 transaction failed 29201/-28, size 0-0 line 3255 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r1, 0x4}], 0x0, 0x0, 0x0}) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x0, 0x401) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x7f, @rand_addr=0x3, 0x4e22, 0x2, 'lblcr\x00', 0x8, 0x7ba, 0x50}, {@empty, 0x4e24, 0x0, 0x8, 0x101, 0x20}}, 0x44) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000003c2e290d51da73ff0f2da1ceb3d960e00b00000000000000000000f10000e83b2ebd6523bfb19a36d1adf0509331769717875bffcc82cfe1ac7d8878316fabfb5eca893e33ed98d4a4824e0c12f96fb0a08876a2f3dda628fa49"], 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) ioprio_set$uid(0xa301067b0d2cce1d, r1, 0x2) quotactl(0x2, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)="9233cde939302a2375308e2746e05684c0246de3b4ed79f48c9ccba52a9340f0f2bdc9c81a44a95dcfe7860d441a339560585529bf375ffde1b818629c1e5ac2ef") [ 972.322776] binder: 14514:14518 ioctl 40046205 6 returned -22 [ 972.325369] binder: 14514:14518 transaction failed 29201/-28, size 0-0 line 3255 18:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x42100, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x20100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348809c1adc0f709b0007000000000010"], 0x0, 0x0, 0x0}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000047770000000000000000000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 18:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffff45, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x406, r0) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000000c0), 0xfffffffffffffd62, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0xd8, 0x2, 0xe1b}]}) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x30, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000deffff5efb00000000000000000000000000726c0000e8000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x148) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xf7}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) [ 972.334676] binder: 14514:14518 ioctl 40046205 6 returned -22 [ 972.345615] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, 0x1}, 0x90) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000005180), 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000401000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 972.349686] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 5 (only 16 groups) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil) 18:33:23 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x800) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="27d61c8213e5c8b9455b9d22dfe4d03ab3745365f2793012b35f010342903b591ad74fad50ad84b97a4e96e11d95e65043495e1b4dad3d7d65d20b949ca577632d61908d59669f64ba55a0e375503d9cdd87ad843bf462340f68427a3b35709e40038d3f510cb684078af3bcd467b1be077be8541a69e2e66e0448d5081c3ca0f9e07235d472164567808887543ec796aa5f19a59277b1b522adcdd211777179bad00512484a80f1fcf2d190f1f91476e025656aed", 0xb5}, {&(0x7f0000000240)="045da2d984b904a4437c5e31881749d5967e784efa403239aeeeb9497495fccd22f34dbda9c096a1ad74dc7c54011344dfa2898a1dfdc84a927bc6b1316b1ae529ebbb4412de643972a2b71824ca0c9c5767c4f895b9f44623e1618084bbc6aa481be4bf3034b19fc8fe", 0x6a}, {&(0x7f00000002c0)="b702bf391e67faee7649ef5be8eb76bec315c400fcac95b1a4f83c7444008fe19d2c24729471f7aab625dfb9eaf35b543e457f0938aecef6f43db8d77665fda619e2a0cd3ffc48d16f09217278d1375204b94d171310c3df50f09194717ee3547c363e2d9b15276c8a2f24040f26d00ebd07860c6a0d9a9d0517ad9b46858a5c08d6e410550ad23c75535bb902b3c1ac2af891acff434f101045664f3fd00844b99f78a68cc468bca75155bb4e28dca924085d6752585b1130f069f5f7bf6c4c75abbc3db557801d6505970a", 0xcc}, {&(0x7f0000000480)="31476f1ae44a1423f68cca69f0d23e83c7aecdd2ac0edf1f5d4ef3760729db1097e2852407d3c7106eb3fb566e55f846cf87714bebc235b529a1becd020ef241c6896301620b3518fd746d0d202f11a662521fcfd4100f1e676e38a5ff9380df340d436607b4926df1a16c4cb6d56c06401df78bdaa75a8db3c72ef02d2bdc5777d72c96ffce423fd80cc823f8c22621e4d7be339baef42e59c5a034daf38ccb9091fa9b103930b2cce3ee5c86959d8036ae21c2dbad4d83eadba2f53449cbc07fbe3ce54c53cf4507ad14935e464205", 0xd0}, {&(0x7f0000000580)="001ca0bb18b7c1ce4de13894eb7227a00d7dee62cd84f9484b352d84fc4ec06970ddf0daad9ad9c69ac90f9c52e3fe2ace690a8769f88fdebf670f90451bb2386b0cb6da061d0a02ab8f553c2bd46518d1304fe864d961f237f2665a6328e1b71ca37f21c251a0eca945279f6cdbcb54933f387fdf76bf426b41df8b4743dacd43a3eb965315c6be0089e6e142117d3848ba8f5421fdcba8aa47b7aca5aa41a99bcecbac2827e5e8902e1856f0c106", 0xaf}, {&(0x7f0000000640)="bf668bc16466f6ef91e2a90e799666b467c931b522fb240ce339e5e5fa9bbf2f4844a5d251021578da826d68bdb66c308230da69f1c3a7467af0f2be7b2e2bfa8a7b447727937a6c9a4672da615e0a25499ba1b411ce860c307d950a87b0c7132d639a68a75263be5f1be868a866cda89315cf58b31e4d5a5bfd92b9564676dbea8b78b3b28762e14e99f95ab9e33b2374ddc3de4bea98c21bd13c701344e56a4f06ea166371", 0xa6}], 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) [ 972.378284] binder: 14521:14527 transaction failed 29201/-22, size 6438379311975614793--7551426708503002662 line 3255 18:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000001000000000000005735159dabfb5f640000000000000000000000000000000000000000000000360000100000000000c1ee59b700000000000000000000003f472bd31bbcb63ce8f8e5838102d69ee8d3e68ac2cef9d813db9bf49157397d893cd7dfbb8111a8f17f1317de61dc78b9"], 0x0, 0x0, 0x0}) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 18:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x420400, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0xf00, 0x70bd29, 0x25dfdbfc, {0x0, r2, {0xf, 0x1}, {0xfffb, 0xb}, {0xfff1, 0xffe8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x2, 0x2}, @free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x2, 0x3}, @register_looper, @increfs_done={0x40106308, r4}], 0xdb, 0x0, &(0x7f0000000480)="0b28fa0e65b2f29b5cc26fb541b7f0875a6253796263d65527de103701d099efcd0841d3312276a4f0ebfd485fdc452efba5dc4f40a52afd1d7e5c05bf22f88ed3e6a645a9a2258ef72f27070ec3750ea0c9e5dc1eb3ad3ccf73498c189b1f22c5ebdfaf3b9ee856311af7ff01253bfdbc4d41bf04f0b280349ffac2911087cc977baa6d71c7c3aba241cc2cc0c93bd844b3296bab730dfa975d49c32d20296a4f94fc942b40c4f5fd640bc9d312d42a39d3931f9908bedc8cc90b0e72b78c39b76bb33232fa1bd55d46389e24ef1fda6f08bf2bd98177b0aaace4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x274, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) [ 972.419597] binder: 14528:14529 transaction failed 29201/-28, size 0-0 line 3255 [ 972.424109] binder: 14528:14529 transaction failed 29201/-28, size 0-0 line 3255 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) pwrite64(r0, &(0x7f0000000480)="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", 0x1000, 0x0) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000010000000000000f19cd000b22c233bbe5d7985cb6f0000000000000000000000e02fafd2c76aa9f0de50e4569aafb16ff141afd423c744872f65b16e95dc1bdb223c57e5265e25783252b302dc758f2c80326805e2d3a932727af9ff0f0000a523301c531d899c3804ca70cf3e66ab140af701a9f8b9b77aac23be212e0ba518c1a54907f75ed8678874ad7d35c7493351626cc8ba4b75075bbc6008db2c564b2bac7a62447707d846e1b34610a5e2f8db3340db182224286d755355a7bcabac0f18b8979f308ef3b9e571f2df49de05219f9f1f1360852567bdace5b0538a7e4ad0a885805cacc1c23c9f5576ecdb0a1792c5f2a11c0f4aa9760db9dcd3f13e5768be2c97e18bbe040ef33f0e09b080343fff8812622934162f86f0253e4c083190572dbcc8cc817f84933af1cdc691ec82bceb4e6eec74479029168300b51ee4083d958d6423b90334609b19704d850024606477bcb53fb9559d63f82447f289ceeb160764656c93d3a34238d7f6aec838e0d993719c075288f20137e06eacc5a1993d96a9a141ab8218375d0887e994baad2d0e621d5407d8b8946a30ce75f937b2afd376ee561fd3ea9aaf6e0612aca06de59de7d01456f11ee97a17a1c4792a946ef64079ec795c9a2b264fe627"], 0x0, 0x0, 0x0}) [ 972.435756] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 18:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80001, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001ed78fd0e67d9dbbdcb0da3a146f99fa16cadf06abbdc068f52512e5fda00976ba52fc652e2e1f1895642e29b0aefe9b0182bc8c4fcd3d3c1e50b8b7a6270f5d28e3cb83b393bc9a6969ce5655aeb81800927a47fcbfa5b068466ac57a0d237a3f3ad992060ccab1ece4f4b9786ed6fad7f89a00b04c5451c92e7f1ea93272e31dedb060600d416cd5a62e8a4760cb3ea7c5167ed31ba10857bcb4213d8e59defc620628ea5a9820ed7cbbe2ea2b0e6302054789635167f4921e480e23ee5e58b85719a9b"], 0x0, 0x0, 0x0}) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/65, 0x41) 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) [ 972.472281] binder: 14538:14542 transaction failed 29189/-22, size 0-0 line 3118 18:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffe9, 0x0, &(0x7f0000000000)=ANY=[], 0xffffffffffffff3e, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = getegid() r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x190, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x26}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x629c}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast1, 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff96fa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x0, {0x58, 0x2, 0x2}, 0x80, r2, r3, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x7de, 0x8, 0x17d, 0x8000, 0xfffffffffffffffc, 0xfff, 0x8, 0xcac, 0xea, 0x4}}, 0xa0) ioctl$VT_DISALLOCATE(r1, 0x5608) 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x315, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="3e5d250056b8ace0fbe23de1780f1f7a"}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x10) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x22}, @loopback, r2}, 0xc) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0xc, "82c4a06b92d0"}, 0x8, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007f40)=[{{&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000002940)=[{&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/165, 0xa5}], 0x8, &(0x7f00000029c0)=""/142, 0x8e}, 0x7f}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a80)=""/140, 0x8c}, {&(0x7f0000002b40)=""/102, 0x66}, {&(0x7f0000002bc0)=""/237, 0xed}, {&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000002cc0)=""/134, 0x86}], 0x5, &(0x7f0000002e00)=""/159, 0x9f}, 0x2}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000002ec0)=""/231, 0xe7}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/19, 0x13}, {&(0x7f0000004000)=""/82, 0x52}, {&(0x7f0000004080)=""/119, 0x77}, {&(0x7f0000004100)=""/141, 0x8d}, {&(0x7f00000041c0)=""/48, 0x30}, {&(0x7f0000004200)=""/22, 0x16}], 0x8}, 0xb5}, {{&(0x7f00000042c0)=@caif=@dgm, 0x80, &(0x7f0000005580)=[{&(0x7f0000004340)=""/146, 0x92}, {&(0x7f0000004400)=""/126, 0x7e}, {&(0x7f0000004480)=""/46, 0x2e}, {&(0x7f00000044c0)=""/157, 0x9d}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x5, &(0x7f0000005600)=""/242, 0xf2}, 0xff}, {{&(0x7f0000005700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/102, 0x66}, {&(0x7f0000006800)=""/72, 0x48}, {&(0x7f0000006880)=""/35, 0x23}], 0x4, &(0x7f0000006900)=""/107, 0x6b}, 0xff}, {{&(0x7f0000006980)=@xdp, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a00)=""/34, 0x22}, {&(0x7f0000006a40)=""/204, 0xcc}], 0x2, &(0x7f0000006b80)=""/222, 0xde}, 0xf58}, {{&(0x7f0000006c80)=@nfc_llcp, 0x80, &(0x7f0000007e80)=[{&(0x7f0000006d00)}, {&(0x7f0000006d40)=""/10, 0xa}, {&(0x7f0000006d80)=""/4096, 0x1000}, {&(0x7f0000007d80)=""/203, 0xcb}], 0x4, &(0x7f0000007ec0)=""/116, 0x74}, 0x10001}], 0x7, 0x40, &(0x7f0000008100)={0x77359400}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000008180)='nbd\x00') recvmmsg(r0, &(0x7f000000ed00)=[{{&(0x7f00000081c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000009600)=[{&(0x7f0000008240)=""/147, 0x93}, {&(0x7f0000008300)=""/4096, 0x1000}, {&(0x7f0000009300)=""/252, 0xfc}, {&(0x7f0000009400)}, {&(0x7f0000009440)=""/166, 0xa6}, {&(0x7f0000009500)=""/236, 0xec}], 0x6}, 0xae7}, {{&(0x7f0000009680)=@generic, 0x80, &(0x7f000000b9c0)=[{&(0x7f0000009700)=""/242, 0xf2}, {&(0x7f0000009800)=""/6, 0x6}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/166, 0xa6}, {&(0x7f000000a900)=""/82, 0x52}, {&(0x7f000000a980)=""/4096, 0x1000}, {&(0x7f000000b980)=""/47, 0x2f}], 0x7, &(0x7f000000ba40)=""/54, 0x36}, 0x7f}, {{&(0x7f000000ba80)=@ethernet={0x0, @random}, 0x80, &(0x7f000000bb40)=[{&(0x7f000000bb00)=""/42, 0x2a}], 0x1, &(0x7f000000bb80)=""/4, 0x4}, 0x8}, {{0x0, 0x0, &(0x7f000000bc40)=[{&(0x7f000000bbc0)=""/124, 0x7c}], 0x1, &(0x7f000000bc80)=""/85, 0x55}, 0x10000}, {{&(0x7f000000bd00)=@nfc_llcp, 0x80, &(0x7f000000c240)=[{&(0x7f000000bd80)=""/7, 0x7}, {&(0x7f000000bdc0)=""/137, 0x89}, {&(0x7f000000be80)=""/199, 0xc7}, {&(0x7f000000bf80)=""/98, 0x62}, {&(0x7f000000c000)=""/242, 0xf2}, {&(0x7f000000c100)}, {&(0x7f000000c140)=""/236, 0xec}], 0x7, &(0x7f000000c2c0)=""/230, 0xe6}, 0x40}, {{&(0x7f000000c3c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f000000d580)=[{&(0x7f000000c440)=""/4096, 0x1000}, {&(0x7f000000d440)=""/69, 0x45}, {&(0x7f000000d4c0)=""/171, 0xab}], 0x3, &(0x7f000000d5c0)=""/140, 0x8c}, 0x15b2}, {{&(0x7f000000d680)=@sco, 0x80, &(0x7f000000da00)=[{&(0x7f000000d700)=""/2, 0x2}, {&(0x7f000000d740)=""/85, 0x55}, {&(0x7f000000d7c0)=""/77, 0x4d}, {&(0x7f000000d840)=""/179, 0xb3}, {&(0x7f000000d900)=""/198, 0xc6}], 0x5}, 0xac45}, {{0x0, 0x0, &(0x7f000000ec80)=[{&(0x7f000000da80)=""/4096, 0x1000}, {&(0x7f000000ea80)=""/255, 0xff}, {&(0x7f000000eb80)=""/165, 0xa5}, {&(0x7f000000ec40)=""/15, 0xf}], 0x4, &(0x7f000000ecc0)=""/38, 0x26}, 0xfffffffffffffffe}], 0x8, 0x2, &(0x7f000000ef00)={0x0, 0x989680}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000000ef40)='/selinux/status\x00', 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000000f040)='/selinux/status\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f000000f140)={&(0x7f0000008140)={0x10, 0x0, 0x0, 0x520800a}, 0xc, &(0x7f000000f100)={&(0x7f000000f080)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2f, 'pids'}, {0x2f, 'pids'}, {0x2b, 'pids'}, {0x2b, 'memory'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2f, 'cpu'}, {0x0, 'cpu'}, {0x2f, 'memory'}]}, 0xfffffffffffffd4b) [ 972.509611] binder: 14538:14542 transaction failed 29189/-22, size 0-0 line 3118 [ 972.547496] binder: 14541:14554 transaction failed 29201/-28, size 0-0 line 3255 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0xd, 0x1a, 0xa, 0x11, 0x2, 0x7ff, 0x4, 0xa0, 0xffffffffffffffff}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 972.618816] binder: 14563:14567 unknown command 536871296 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xa9) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x2) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000180)="f0bc1c2f53aa19ab8a23c04dfca6de556f18c042c826dc01facef883af65eb4ea3b33add0665cf4fd65b8fc5d65188e63e7708ad3981e0b0bcee5616268b4dd4a8cfa955ce7dee8cd894abddca36333a05816dde7b67b74c5b518eadb506657a44fe94ea4a08b2835317b031a1db2b81e6cc1adbed8518bc", 0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x94c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=[@enter_looper, @register_looper], 0x3, 0x0, &(0x7f0000000100)="e23533"}) [ 972.618826] binder: 14563:14567 ioctl c0306201 20000440 returned -22 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:23 executing program 4: mknod$loop(&(0x7f0000000000)='.\x00', 0x926, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000150000000000000000000000e80dc2ff7aba2387c949cb5e9c6d343b1b388cf489473746100390e56d88e495a4b6f3b78ba83610fef7674626aba5fb35bef57c29d860219403b8ee412f787db52665fd24a5630c0058c9b63935d6eaf1e7147b45fc85885126aa134b0a2800000000000000"], 0x0, 0x0, 0x0}) 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) fsync(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x6de22a89be3c2c77, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000001}, [@jmp={0x5, 0x8, 0x5, 0xb, 0xf, 0xfffffffffffffffd, 0x1}, @jmp={0x5, 0x6, 0x7, 0xd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffffffffffe, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x1, [], 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='/dev/binder#\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) [ 972.628853] binder: 14541:14554 transaction failed 29201/-28, size 0-0 line 3255 18:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000035fdedb5000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x192) r1 = socket$packet(0x11, 0x2, 0x300) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xd) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff2c147bfee04395498df13cd12d"], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xa002, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) [ 972.680314] binder: 14574:14579 transaction failed 29201/-28, size -3960305643318935552-10537 line 3255 18:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) [ 972.690139] binder: 14574:14582 transaction failed 29201/-28, size -3960305643318935552-10537 line 3255 18:33:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000000)=""/38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8b04ad7d28b6550700000000000000f02840851176132f5bb5"], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @multicast1}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e23, @rand_addr=0x1}, 'veth0_to_bridge\x00'}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x8}) r2 = memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0x2) ioctl$int_out(r2, 0x5460, &(0x7f0000000140)) [ 972.743985] audit: type=1400 audit(1553625201.882:82): avc: denied { relabelto } for pid=14571 comm="syz-executor.4" name="bus" dev="sda1" ino=17306 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 972.790007] audit: type=1400 audit(1553625201.922:83): avc: denied { getattr } for pid=21292 comm="syz-executor.4" path="/root/syzkaller-testdir850106985/syzkaller.aQsxW6/1194/bus" dev="sda1" ino=17306 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 972.790242] audit: type=1400 audit(1553625201.922:84): avc: denied { unlink } for pid=21292 comm="syz-executor.4" name="bus" dev="sda1" ino=17306 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 972.806856] binder: 14596:14599 transaction failed 29201/-28, size 0-0 line 3255 [ 972.807726] binder: 14596:14599 transaction failed 29201/-28, size 0-0 line 3255 [ 972.808196] binder: 14597:14600 transaction failed 29201/-28, size 0-0 line 3255 [ 972.853487] binder: 14603:14607 transaction failed 29189/-22, size 0-0 line 3118 [ 972.863395] binder: 14603:14610 transaction failed 29189/-22, size 0-0 line 3118 [ 972.890613] binder: 14612:14615 unknown command 0 [ 972.890622] binder: 14612:14615 ioctl c0306201 20000440 returned -22 [ 972.937637] binder: 14614:14621 transaction failed 29201/-28, size 0-0 line 3255 [ 972.989607] binder: 14628:14632 got transaction to invalid handle [ 972.989617] binder: 14628:14632 transaction failed 29201/-22, size 0-0 line 3118 [ 972.991334] binder: 14628:14632 got transaction to invalid handle [ 972.991343] binder: 14628:14632 transaction failed 29201/-22, size 0-0 line 3118 [ 973.031108] binder: 14638:14640 transaction failed 29201/-28, size 0-0 line 3255 [ 973.078867] binder: 14644:14651 got transaction to invalid handle [ 973.078878] binder: 14644:14651 transaction failed 29201/-22, size 0--71468255809792 line 3118 [ 973.080096] binder: 14645:14650 got transaction to invalid handle [ 973.080105] binder: 14645:14650 transaction failed 29201/-22, size 0-0 line 3118 [ 973.157807] binder: 14660:14664 transaction failed 29201/-28, size 0-0 line 3255 [ 973.157828] binder: 14660:14664 ioctl c0306201 20000440 returned -14 [ 973.163964] binder: 14656:14665 transaction failed 29201/-28, size 0-0 line 3255 [ 973.183006] binder: 14660:14667 transaction failed 29201/-28, size 0-0 line 3255 [ 973.183031] binder: 14660:14667 ioctl c0306201 20000440 returned -14 [ 973.186510] binder: 14656:14665 transaction failed 29201/-28, size 0-0 line 3255 [ 973.203974] binder: 14669:14672 transaction failed 29201/-22, size 0-0 line 3255 [ 973.236984] binder: 14674:14677 got transaction to invalid handle [ 973.236995] binder: 14674:14677 transaction failed 29201/-22, size 0-0 line 3118 [ 973.292879] binder: 14680:14683 unknown command 808482864 [ 973.292889] binder: 14680:14683 ioctl c0306201 20000440 returned -22 [ 973.368880] binder: 14695:14697 transaction failed 29201/-22, size -6135584651332288512--8183363079781833878 line 3255 [ 973.397291] binder: 14699:14700 got reply transaction with no transaction stack [ 973.397301] binder: 14699:14700 transaction failed 29201/-71, size 80-8 line 3026 [ 973.397549] binder: 14699:14700 transaction failed 29201/-28, size 0-0 line 3255 [ 973.402784] binder: 14699:14700 got reply transaction with no transaction stack [ 973.402793] binder: 14699:14700 transaction failed 29201/-71, size 80-8 line 3026 [ 973.402879] binder: 14699:14704 transaction failed 29201/-28, size 0-0 line 3255 [ 973.456775] binder: 14706:14711 transaction failed 29189/-22, size 0-0 line 3118 [ 973.457808] binder: 14706:14711 transaction failed 29189/-22, size 0-0 line 3118 [ 973.471348] binder: 14707:14714 unknown command 1078486801 [ 973.471358] binder: 14707:14714 ioctl c0306201 20000440 returned -22 [ 973.472543] binder: 14707:14714 unknown command 1078486801 [ 973.472551] binder: 14707:14714 ioctl c0306201 20000440 returned -22 [ 973.498675] binder: 14713:14718 ioctl 400c6615 20000a40 returned -22 [ 973.501217] binder: 14713:14718 transaction failed 29201/-22, size -7726513606955536762-7772916690209880430 line 3255 [ 973.521719] binder: 14713:14724 ioctl 400c6615 20000a40 returned -22 [ 973.525308] binder: 14713:14718 transaction failed 29201/-22, size -7726513606955536762-7772916690209880430 line 3255 [ 973.539581] binder: 14722:14727 got transaction to invalid handle [ 973.539593] binder: 14722:14727 transaction failed 29201/-22, size 4241082772235943936-7884224698513540491 line 3118 [ 973.553187] binder: 14722:14727 got transaction to invalid handle [ 973.553200] binder: 14722:14727 transaction failed 29201/-22, size 4241082772235943936-7884224698513540491 line 3118 [ 973.624240] binder: 14736:14740 transaction failed 29201/-22, size 0-562949953421312 line 3255 [ 973.647732] binder: 14738:14742 unknown command -347577583 [ 973.647742] binder: 14738:14742 ioctl c0306201 20000440 returned -22 [ 973.664453] binder: 14736:14740 ioctl 5607 0 returned -22 [ 973.664533] binder: 14736:14740 ioctl 6685 0 returned -22 [ 973.666210] binder: 14736:14740 transaction failed 29201/-22, size 0-562949953421312 line 3255 [ 973.672880] binder: 14736:14752 ioctl 5607 0 returned -22 [ 973.672954] binder: 14736:14749 ioctl 6685 0 returned -22 [ 973.710584] binder: 14747:14755 transaction failed 29189/-22, size 0-0 line 3118 [ 973.719750] binder: 14747:14755 transaction failed 29189/-22, size 0-0 line 3118 [ 973.720241] binder: 14756:14759 transaction failed 29201/-22, size 0-0 line 3255 [ 973.734334] binder: 14756:14763 transaction failed 29201/-22, size 0-0 line 3255 [ 973.742923] binder: 14760:14765 transaction failed 29189/-22, size 0-0 line 3118 [ 973.762621] binder: 14760:14765 transaction failed 29189/-22, size 0-0 line 3118 [ 973.784215] binder: 14768:14771 unknown command 654861072 [ 973.784225] binder: 14768:14771 ioctl c0306201 20000440 returned -22 [ 973.819351] binder: 14768:14771 unknown command 654861072 [ 973.819360] binder: 14768:14771 ioctl c0306201 20000440 returned -22 [ 973.828237] binder: 14775:14780 transaction failed 29201/-28, size 0-0 line 3255 [ 973.833551] binder: 14774:14782 unknown command 1140 [ 973.833561] binder: 14774:14782 ioctl c0306201 20000440 returned -22 [ 973.919533] binder: 14797:14799 BC_INCREFS_DONE u0000000000000000 no match [ 973.923403] binder: 14797:14802 BC_INCREFS_DONE u0000000000000000 no match [ 973.926668] binder: 14796:14798 transaction failed 29201/-28, size 0-0 line 3255 [ 973.937965] binder: 14796:14798 transaction failed 29201/-28, size 0-0 line 3255 [ 973.990222] binder: 14812:14817 transaction failed 29201/-22, size 0-5116089176692883456 line 3255 [ 974.021800] binder: 14821:14824 transaction failed 29189/-22, size 0-0 line 3118 [ 974.025889] binder: 14821:14824 transaction failed 29189/-22, size 0-0 line 3118 [ 974.036553] binder: 14814:14819 unknown command -2142739695 [ 974.036564] binder: 14814:14819 ioctl c0306201 20000440 returned -22 [ 974.045192] binder: 14814:14828 unknown command -2142739695 [ 974.045205] binder: 14814:14828 ioctl c0306201 20000440 returned -22 [ 974.130779] binder: 14834:14841 transaction failed 29201/-28, size 0-0 line 3255 18:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x38, 0x0, &(0x7f00000002c0)=ANY=[@ANYPTR64, @ANYRES16=r0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYPTR, @ANYRESHEX, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0], @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0], @ANYRES64=r0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="f63628508cab9a4e146ad02125a2b0343adb4cd8cedefe78759562053e67a1693c9174e16a4005896972c07de310f14ff9b7205d37f357cbf835374e575ef965421fff9e19fbb94ce36f4b", @ANYPTR64, @ANYRESHEX=0x0]], @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0}) 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000e1ffffffffffffff0000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063acdd5e9a000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000001a003ed5d93c00000000000000010001d82cc72d626e9aeaaa14060b13deb1e224dd352428a9d4c32a620a0636ce98d6b190dc6789856b010b0291c760a2938dd53a57ecd2de8a2418152456eaaba19736065756ee6dc5225421ad445d2f8a3e14a3fbb3645146c888ddb1a417105d57d5259ced5238ad4431535cbe6fb26d2b41e24329396892fe940fcd0836d70726969f77436733cef736873815f569cd46450981"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) [ 974.132696] binder: 14839:14842 transaction failed 29201/-28, size 0-0 line 3255 [ 974.173199] binder: 14825:14852 transaction failed 29201/-22, size 0-0 line 3255 [ 974.220065] binder: 14856:14864 transaction failed 29189/-22, size 0-0 line 3118 [ 974.228207] binder: 14825:14852 transaction failed 29201/-22, size 0-0 line 3255 [ 974.262634] binder: 14859:14866 transaction failed 29201/-28, size 0-0 line 3255 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000240)=[@register_looper, @free_buffer={0x40086303, r1}, @release={0x40046306, 0x4}, @exit_looper, @increfs={0x40046304, 0x3}, @dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x60, 0x28, &(0x7f00000001c0)=[@fda={0x66646185, 0x8, 0x2, 0x20}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x1, 0x18}], &(0x7f0000000100)=[0x30, 0x38, 0x30, 0x20, 0x20]}, 0x98}}, @clear_death={0x400c630f, 0x4, 0x2}], 0x1000, 0x0, &(0x7f0000000480)="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"}) pipe2(&(0x7f0000000000), 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000072b5c59f09c89e90ca4ec95b180000000100000000000000000000000000000000000000000000000001000000000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x35c, 0x0, &(0x7f0000000300)=ANY=[], 0xffffffffffffff2a, 0x0, 0x0}) 18:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) tgkill(r1, r2, 0x32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000080)}) 18:33:24 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x8000, 0x9, 0x69b, 0x7, 0x0, 0x400, 0x1, 0x4, 0x81, 0xff5, 0x9, 0x5, 0x0, 0x2, 0x8, 0x6, 0x0, 0x6c, 0x0, 0x7a, 0x1, 0x98, 0x2, 0x8001, 0x4, 0xffff, 0x2, 0x4, 0x504964f4, 0xffff, 0xffffffffffffff00, 0x5, 0x4, 0x0, 0x1, 0x2b4, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x4000, 0xfff, 0x9, 0x5, 0x0, 0x5, 0x101}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x3, "52c3a6e3a0febcba"}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 974.264815] binder: 14859:14866 transaction failed 29201/-28, size 0-0 line 3255 [ 974.281568] binder: 14867:14869 transaction failed 29201/-22, size 0-0 line 3255 [ 974.289068] binder: 14867:14877 transaction failed 29201/-22, size 0-0 line 3255 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) 18:33:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000001000000000000000000000000000000000000000000000000000000000000c80d2e20000e06cf6edb728554fc1bcad84fbb5eb04ca2eb6e35066a79a1a226af66870be3df81b503f88b06b2a8acc3d0d0380e1b84"], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x3c8, 0x0, 0x5, {0x2}}, 0x18) 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11638c3d000000000000000000000000e200000000000000010000000000000000000000000000000000009e0000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) sendto(r1, &(0x7f0000000000)="3f6faacf40c58a58f7ccf10df77e7e81fd5d491f3633bf8e824f950ce4814fca57fb0e80e582768284da158958cdb5d687e023c84dccee31889d3f6892e88899916290b5cbd765bf871030c6896fc493899a7de4ca51038968dd5a15c3ac09d5e40871123cd26b97ce4235a5595cfc7eb02b2534abe8723be0dfcba199e6c90c3859a546207f553264145884390a11caec93bb46", 0x94, 0x40, &(0x7f0000000140)=@l2={0x1f, 0x80000000, {0x3, 0x7ff, 0x400, 0x0, 0x4, 0x4}, 0x1f, 0x9}, 0x80) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x10000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_getscheduler(r4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="be3b46d59996000000000000", @ANYRES16=r3, @ANYBLOB="08002cbd7000fbdbdf250e0000003000010008000b00736970000800050002000000080002002c00000014000300ac1414bb0000000000000000000000001400020008000400400000000800080002000000140001000800060064680000080001000a00000008000600020000000800060000000000640001000c000700200000000800000014000300fe8000000000000000000000000000bb0800090069000000080009006d0000000c000700020000001000000014000300fe88000000000000000000000000000108000100020000000800060073656400"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 18:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x11, 0x0, &(0x7f0000000000), 0x65c, 0x0, 0x0}) [ 974.319076] binder: 14875:14879 transaction failed 29201/-22, size -1104106892206455135-3337539573107178346 line 3255 [ 974.334091] binder: 14875:14882 transaction failed 29201/-22, size -1104106892206455135-3337539573107178346 line 3255 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) 18:33:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0xffffffffffffffb9, 0x0, 0x0}) [ 974.360495] binder: 14881:14883 transaction failed 29201/-22, size 0-0 line 3255 [ 974.374225] binder: 14886:14890 ioctl c0306201 20000440 returned -14 [ 974.392133] binder: 14881:14883 transaction failed 29201/-22, size 0-0 line 3255 18:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xff, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8) 18:33:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x5) signalfd4(r0, &(0x7f0000000280)={0x28d0}, 0x8, 0x80000) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xe7, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="96f9ccd766b82cec13b8f62d681995a1b2cd45b544f602556a5af6814f87de8ead11972986c05cd7e6be0651c1a12ca0bce901c73ceabe048697616da7df020a43002c21c51c4b55557936ae4ec4363390be8a870990f708bed2b5f990bcb770348f3d8770a9ab2c12ee5ede230c2579dd39c6be25e77052c341dce390f0a7f20d025cbc95fbe914b936986e443c89bcc0df368b6d6a38c0196245556f8a5b33a472705c5f061ae5b05d8db948a83f53420d3768db57", @ANYPTR, @ANYRES16, @ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r1, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r1, @ANYPTR, @ANYRESOCT=r1, @ANYRESOCT=r1], @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESOCT=r1, @ANYPTR64, @ANYBLOB="54fb3b2207226f39b2cbb7c2538f908d0ea7bbae1baa480e1e68f4abb2689b65626bb3c03789bdb4feb03f124a050f47c8cdd28297bd26b5f2e394151346136fa0ad8b6524d0acf0c7a8ae5914fac4501850e7346e9130cbd9211361afeff393d366a0c52674bde492deaea8e0ef99a36e11d18735e0731a24ee50763bd15fe80d1f309230b20681c20f287c06bf521eba8c4ea416f9c9cb089f73a125067913615f4bbde77779efd14b7eec", @ANYPTR, @ANYRESHEX=r1], @ANYRES64=r1]], 0x0, 0x0, 0x0}) 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) [ 974.408320] binder: 14891:14897 transaction failed 29201/-28, size 0-0 line 3255 [ 974.414298] binder: 14886:14890 ioctl c0306201 20000440 returned -14 [ 974.460798] binder: 14906:14910 transaction failed 29201/-22, size 0-0 line 3255 18:33:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x19, 0x0, &(0x7f0000000080)=ANY=[], 0x53760a154b1a6b06, 0x0, 0x0}) 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000140)=[{{r2, r3/1000+30000}, 0x12, 0x0, 0x9}, {{}, 0x15, 0x3, 0x401}, {{0x77359400}, 0x5, 0x5, 0x3}, {{}, 0x3, 0x1, 0x7ff}, {{0x77359400}, 0x1f, 0x6, 0x7f}, {{0x0, 0x7530}, 0x1f, 0x2, 0x2}, {{r4, r5/1000+30000}, 0x17, 0x200, 0x3ff}, {{r6, r7/1000+30000}, 0x15, 0x0, 0xe88b}], 0xc0) [ 974.463134] binder: 14891:14897 transaction failed 29201/-28, size 0-0 line 3255 [ 974.535401] binder: 14920:14927 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 18:33:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1b, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000263c689086240000000000000000000080b265877d4fb5e800000000000000000000000000000000"], 0xfffffffffffffe11, 0x0, 0x0}) 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000490d46c68155512cdbcf054b7a6f00000001000000000000000000000000000000000095f9485751147d0000000000000000080000000000000000000000000000000000fb"], 0x0, 0x0, 0x0}) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x1010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xa8, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r1, 0x3}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000000c0)=[@fda={0x66646185, 0x5, 0x3, 0x1e}, @fda={0x66646185, 0x4, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x1}], &(0x7f0000000140)}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38, 0x10, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x1, 0x1d}], &(0x7f00000001c0)=[0x78, 0x40]}}], 0xc2, 0x0, &(0x7f00000002c0)="4bbb2a33fa4957aafe5aa30fac622f0eaa0819453c08d1faf7ffd6fddc8f57ade30ecad64ea141ac2a6c3b2d8e8455a6b4a190808b3f02b1aad0a4f934248ef860c2952b7d487a53b885cd8e2058e56763904405d14f027fa8fadc94906bfda8868d0421d122c94230e8b94e28f60f3bdb9d470c6864f55828b4c81bb05f6bbbb9801b2ea41c7b23820c7e1585d78c60c43222e9e602b6667408e445ff97efacb4324d0e3bce1c1243c9253c036bb9d16f52f683cd0a434c0727615a65b388cca42e"}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) dup3(r2, r2, 0x80000) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) 18:33:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000062cf00000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fc", 0x57}], 0x1) 18:33:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116342a91b4c40c6e48e9d81d99597d353be5bb055d048400000000000000000000000000000fe000000000001"], 0x0, 0x0, 0x0}) [ 974.535419] binder: 14924:14930 transaction failed 29189/-22, size 0-0 line 3118 [ 974.546401] binder: 14924:14932 transaction failed 29189/-22, size 0-0 line 3118 [ 974.577081] binder: 14929:14933 ioctl c0306201 20000440 returned -14 18:33:24 executing program 4: socketpair(0x10, 0x800, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x4c, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="12634840010000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000001540)=ANY=[@ANYBLOB="852a627700000000", @ANYRES64=r1, @ANYBLOB="0300000000000000856164660000000003000000000000000100000000000000360000c914af3000"], @ANYPTR=&(0x7f0000001580)=ANY=[], @ANYBLOB="f6c600000000000003630840", @ANYRES64=r1, @ANYBLOB="076304400100000003630840", @ANYRES64=r1], 0xfffffffffffffead, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r3 = request_key(&(0x7f00000003c0)='\x01\x00\x00\x00\x01\x00\x00\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)='\x01\x00\x00\x00\x00\x00\x00\x00de#\x00\x00', 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000340)=[{&(0x7f0000000080)="e8327fed82b8e871bf64df650646df93a68f06c53bcf262ceae93b1c767b462a177a473a2231133db62429d0bee9d4daf5a48480c929bfd0", 0x38}, {&(0x7f0000000140)="ad797a885fdd7eee451d1cea258857888078be24006294eb7f843face23cd046654012479e62eb26bdfbfe4f4ae6485f1e3b1cc63f35ea8d6eb24538021c0e7aca2f17dc16b482f69432777273bd11e3328192b4e677ba4f568258b3bebc4bb413db2d1259aefd82e4a8b8891a1e07eb967701008d56454bc9d9f69d26f5a4fc19a01b6e8691fd02", 0x88}, {&(0x7f0000000200)="5b1bab47b15c3a366052174103fafec35539d305693e8808c709ab661f09bc26e48fbd28cb8ecf7673085663dea03d47042ea16f2d70c88cfe6ab0363276997b934d60d922396075c72becb2422e3cdcecf79224c29b69130a29026d3a744b4e3f9ced6348", 0x65}, {&(0x7f0000000280)="9b4791bd361cee197fcc072ed86da7b27ff14fb2b879013706104aa2", 0x1c}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000002c0)="d3874937524a5fdc1b8f507e3f60330924ba827557956c82a9a1d9c9f5164681c85cdc0f600bc9d22176e0497d3fe673b4dfb1d029492efddc591513d4417f8fb00dfb4c80560907a6263c810ea4d0982b944a9b99254f42fa3401eabc", 0x5d}], 0x6, r3) 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x610200, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x23db}) [ 974.579601] binder: 14929:14933 ioctl c0306201 20000440 returned -14 [ 974.627155] binder: 14937:14941 transaction failed 29189/-22, size 0-0 line 3118 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fc", 0x57}], 0x1) 18:33:24 executing program 3: remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x74fa8c50, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:24 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000100)="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") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000da000000000000000000000000e8"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 974.643645] binder: 14937:14946 transaction failed 29189/-22, size 0-0 line 3118 [ 974.683075] binder: 14948:14950 unknown command 2108490891 18:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000c3b2290c5bc795715b690000000000000000000000000000aa800e38ac82d37e9c1deea549af6195c32f0000000000000000e9c066984330f7ffee7b51af09831af22dc70ffe43dca8677dd17438c34923b42724eab80ac1dd15dff7caa8dcda1c05ae0fa63baa2d7b739806b03027d07f153e7c305253962db47110b6347a1ea3eb63a54241408384aa16754c5647ae06da3287f8995540ad5fc9ff953e1d8d45f96e16b8aa0eb8d222688747a8850d46c4bc90f31df3fb5c556d9962831b2603b27e453273912a5f3a3069"], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x201, 0x20) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="a61659656ff9916ed4a9bb90c8637bcaf7905213010cd0a60bbb7ab819fa5be2135f259aff6edf8857434b79d1f999e70d8e99a556ec749a735a600d7ae80d9ac56482981d2a78fe996073f624eb0da4e7713a9f48558141880a27dc05b288330b0c12bc51dfbcb11c9c945e1da1872b83847b3e", 0x74}, {&(0x7f0000000200)="3574232f5949bbab505ac998a1be884fb03b5452aeb7c8eb5df4ce3c3b3851bfe9d1e22e945e0360930fca483cefd3a117d3056a5e1b0782b3ef10432348696f1359ec4edbee6a8a57c3f5250f470990e4a1311845fcde6fb6b5b5f66b415367239c91a3c75a4151019f57c766bca29aa1412a695145338e6b4df94d1a6823ae6d7f00f13c124b1f3cedb8c092d4a934c5f463222f0d23609985e6209786e33f8edcb826d491e90ca4001191fe1fabe4b9", 0xb1}, {&(0x7f00000000c0)="d3f613d4cce47a60ef1f81c8a1a6611a83d38451cdaab1817722921c8fbb0cf03d7210b0b1ad8f7831c8e16e15ca7c6a1d5fdd9f658aa77ecd857fb0", 0x3c}, {&(0x7f00000002c0)="736ee2ef6e1d31afb9958fcf7cd99fc1e544bfb265b6e80d4b173388ffd88c5de395f18ceca3504845e950c80b69a2691c62acfaa493c471a0b073fc9ae39df9072f4c68c53ea8efc112e5ccadbe1c81141099c635fd278717f3", 0x5a}, {&(0x7f0000000480)="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", 0x1000}], 0x5, 0x8) 18:33:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x4dd, 0x0, 0x134451fe, 0x1, 0x19, 0x25a8, 0x3, 0x6, 0x4}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff953dedf5a7d0ef1f0a7c5d49ff42a1dba9f7e7145fdade20810b05ddc6c790b00efa0971096f6957f859e5310818b8146d64d9b96062006f"], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 18:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fc", 0x57}], 0x1) 18:33:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000140)="05f14ff9e11466705bde302cdff98f6d556321e99f006e7ae9f73ff83303423e6a834a24558a9bdf089153270b6569445315af41bda193efcbd7d9d58886151f9edbc7bd042f3be25a5e3f8ec170f327a2f40a4bf4ee6cd5bb57f82a155a040a12b9432853cca9a028966ef68667922d49e84f8a5165192970151191e70a83e2212107d35a8e32fcc4f3270e6ab2dd2e5cb9cd08606181f1e939525f831cd30193fd6930600d1971455a86cf35a93c75cf73ac617bb02451f54d88b1839eab87772a8352a279a494621ff0a4af97861db31f341f2427c2", 0xd7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0}) [ 974.683085] binder: 14948:14950 ioctl c0306201 20000440 returned -22 [ 974.683255] binder: 14948:14950 ioctl 8953 20000080 returned -22 18:33:25 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xab3a633dca28b1cd}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 974.685118] binder: 14948:14950 unknown command 2108490891 [ 974.685126] binder: 14948:14950 ioctl c0306201 20000440 returned -22 [ 974.685261] binder: 14948:14950 ioctl 8953 20000080 returned -22 [ 975.320661] binder: 14920:14955 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 975.357157] binder: 14956:14959 unknown command 0 [ 975.357167] binder: 14956:14959 ioctl c0306201 20000440 returned -22 [ 975.361862] binder: 14963:14965 transaction failed 29201/-28, size 0-0 line 3255 [ 975.389414] binder: 14966:14967 ERROR: BC_REGISTER_LOOPER called without request [ 975.389427] binder: 14966:14967 BC_FREE_BUFFER u0000000000000000 no match [ 975.389439] binder: 14966:14967 Release 1 refcount change on invalid ref 4 ret -22 [ 975.389450] binder: 14966:14967 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 975.389458] binder: 14966:14967 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 975.389464] binder: 14966:14967 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 975.389472] binder: 14966:14967 got transaction to invalid handle [ 975.389482] binder: 14966:14967 transaction failed 29201/-22, size 96-40 line 3118 [ 975.389755] binder: 14966:14967 transaction failed 29189/-22, size 256-0 line 3118 [ 975.393636] binder: 14960:14969 transaction failed 29189/-22, size 3881299009928565515-748207508671768612 line 3118 [ 975.394252] binder: 14960:14969 transaction failed 29189/-22, size 3881299009928565515-748207508671768612 line 3118 [ 975.411117] binder: 14966:14970 ERROR: BC_REGISTER_LOOPER called without request [ 975.411132] binder: 14966:14970 BC_FREE_BUFFER u0000000000000000 no match [ 975.411147] binder: 14966:14970 Release 1 refcount change on invalid ref 4 ret -22 [ 975.411159] binder: 14966:14970 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 975.411168] binder: 14966:14970 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 975.411176] binder: 14966:14970 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 975.411186] binder: 14966:14970 got transaction to invalid handle [ 975.411195] binder: 14966:14970 transaction failed 29201/-22, size 96-40 line 3118 [ 975.414232] binder: 14966:14970 transaction failed 29189/-22, size 256-0 line 3118 [ 975.454157] binder: 14978:14979 ioctl 5429 20000040 returned -22 [ 975.454411] binder: 14978:14979 transaction failed 29201/-28, size 0-0 line 3255 [ 975.454941] binder: 14978:14980 ioctl 5429 20000040 returned -22 [ 975.455083] binder: 14978:14980 transaction failed 29201/-28, size 0-0 line 3255 [ 975.475937] binder: 14982:14987 transaction failed 29201/-28, size 0-0 line 3255 [ 975.510870] binder: 14994:14995 unknown command 0 [ 975.510881] binder: 14994:14995 ioctl c0306201 20000440 returned -22 [ 975.573237] binder: 15006:15008 unknown command 808464432 [ 975.573247] binder: 15006:15008 ioctl c0306201 20000440 returned -22 [ 975.591058] binder: 15007:15010 transaction failed 29201/-28, size 0-0 line 3255 [ 975.591191] binder: 15007:15010 ioctl 81009431 20000140 returned -22 [ 975.591724] binder: 15007:15010 transaction failed 29201/-28, size 0-0 line 3255 [ 975.605537] binder: 15007:15015 ioctl 81009431 20000140 returned -22 [ 975.644498] binder: 15020:15023 transaction failed 29201/-22, size 0-0 line 3255 [ 975.645377] binder: 15020:15023 transaction failed 29201/-22, size 0-0 line 3255 [ 975.673377] binder: 15018:15026 unknown command 0 [ 975.673387] binder: 15018:15026 ioctl c0306201 20000040 returned -22 [ 975.677005] binder: 15018:15026 unknown command 0 [ 975.677014] binder: 15018:15026 ioctl c0306201 20000040 returned -22 [ 975.717551] binder_alloc: 6724: binder_alloc_buf size 134283264 failed, no address space [ 975.717562] binder_alloc: allocated: 9360 (num: 492 largest: 32), free: 2928 (num: 1 largest: 2928) [ 975.717587] binder: 15032:15034 transaction failed 29201/-28, size 65536-0 line 3255 [ 975.721422] binder_alloc: 6724: binder_alloc_buf size 134283264 failed, no address space [ 975.721430] binder_alloc: allocated: 9360 (num: 492 largest: 32), free: 2928 (num: 1 largest: 2928) [ 975.721452] binder: 15032:15034 transaction failed 29201/-28, size 65536-0 line 3255 [ 975.722985] binder: 15030:15038 unknown command 25361 [ 975.722993] binder: 15030:15038 ioctl c0306201 20000440 returned -22 [ 975.757160] binder: 15030:15041 unknown command 25361 [ 975.757171] binder: 15030:15041 ioctl c0306201 20000440 returned -22 [ 975.786349] binder: 15045:15048 transaction failed 29189/-22, size 0-0 line 3118 [ 975.787838] binder: 15045:15048 transaction failed 29189/-22, size 0-0 line 3118 [ 975.829009] binder: 15039:15056 unknown command -1455267055 [ 975.829021] binder: 15039:15056 ioctl c0306201 20000440 returned -22 [ 975.833487] binder: 15052:15061 transaction failed 29201/-28, size 0-0 line 3255 [ 975.837180] binder: 15052:15064 transaction failed 29201/-28, size 0-0 line 3255 [ 975.849977] binder: 15060:15063 ioctl 40086602 20000080 returned -22 [ 975.859957] binder: 15060:15063 transaction failed 29201/-22, size 0-0 line 3255 [ 975.860796] binder: 15060:15063 ioctl 40086602 20000080 returned -22 [ 975.863636] binder: 15060:15063 transaction failed 29201/-22, size 0-0 line 3255 [ 975.912086] binder: 15070:15072 transaction failed 29201/-28, size 0-0 line 3255 [ 975.913149] binder: 15070:15073 transaction failed 29201/-28, size 0-0 line 3255 [ 976.372347] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.377803] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.383362] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.388838] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.394399] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.399868] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.405423] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.410884] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.416719] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.422215] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.427695] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.433241] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.439013] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.444557] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.450037] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.455802] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.461306] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.466853] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.473525] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.479048] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.484889] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.490383] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.496056] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.501544] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.514882] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.520369] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.525950] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.531589] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.537133] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.542691] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.545982] binder: 15039:15074 unknown command -1455267055 [ 976.545992] binder: 15039:15074 ioctl c0306201 20000440 returned -22 [ 976.560409] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.565975] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.571472] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.577038] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.582573] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.588088] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.593619] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.599124] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.604706] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.610266] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.615834] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.621307] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.626951] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.632518] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.638020] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.643874] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.649358] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.654881] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.660409] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.666032] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.671526] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.677043] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.682640] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.688127] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.693848] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.699333] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.704896] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.710381] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.716114] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.721586] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.727161] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.732705] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.738236] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.744020] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.749569] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.755129] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.760631] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.766210] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.771676] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.777322] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.782875] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.788360] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.793921] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.799403] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.804987] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.810603] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.816132] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.821642] binder: release 14601:14606 transaction 1195 out, still active [ 976.828726] binder: undelivered TRANSACTION_COMPLETE [ 976.833945] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.839410] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.844981] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.850503] binder: release 14590:14592 transaction 1191 out, still active [ 976.857543] binder: undelivered TRANSACTION_COMPLETE [ 976.862823] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.868282] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.873843] binder: release 14576:14580 transaction 1190 out, still active [ 976.880857] binder: undelivered TRANSACTION_COMPLETE [ 976.886107] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.891591] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.897366] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.902880] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.908363] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.913886] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.919482] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.925068] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.930697] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.936229] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.941765] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.947404] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.952947] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.958517] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.964106] binder: undelivered TRANSACTION_ERROR: 29189 [ 976.969690] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.975313] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.980777] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.986416] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.991879] binder: undelivered TRANSACTION_ERROR: 29201 [ 976.997616] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.003200] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.008693] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.014255] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.019754] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.025479] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.030999] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.036893] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.042586] binder: release 14331:14334 transaction 1158 out, still active [ 977.049593] binder: undelivered TRANSACTION_COMPLETE [ 977.054769] binder: release 14331:14334 transaction 1157 out, still active [ 977.061774] binder: undelivered TRANSACTION_COMPLETE [ 977.067131] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.072794] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.078269] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.083935] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.089455] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.095126] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.100663] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.106272] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.111840] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.117380] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.122928] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.128428] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.134059] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.139599] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.145248] binder: release 14231:14237 transaction 1142 out, still active [ 977.152330] binder: undelivered TRANSACTION_COMPLETE [ 977.157521] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.163069] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.168762] binder: release 14218:14221 transaction 1139 out, still active [ 977.175830] binder: undelivered TRANSACTION_COMPLETE [ 977.180996] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.186646] binder: release 14205:14208 transaction 1137 out, still active [ 977.193723] binder: undelivered TRANSACTION_COMPLETE [ 977.198949] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.204518] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.210202] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.215737] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.221240] binder: release 14174:14177 transaction 1132 out, still active [ 977.228298] binder: undelivered TRANSACTION_COMPLETE [ 977.233599] binder: release 14164:14167 transaction 1131 out, still active [ 977.240606] binder: undelivered TRANSACTION_COMPLETE [ 977.245843] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.251351] binder: release 14148:14150 transaction 1129 out, still active [ 977.258415] binder: undelivered TRANSACTION_COMPLETE [ 977.263760] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.269238] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.274864] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.280404] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.286041] binder: release 14115:14120 transaction 1124 out, still active [ 977.293107] binder: undelivered TRANSACTION_COMPLETE [ 977.298373] binder: release 14107:14109 transaction 1123 out, still active [ 977.305429] binder: undelivered TRANSACTION_COMPLETE [ 977.310671] binder: release 14093:14097 transaction 1122 out, still active [ 977.317729] binder: undelivered TRANSACTION_COMPLETE [ 977.322966] binder: undelivered TRANSACTION_ERROR: 29189 [ 977.328439] binder: undelivered TRANSACTION_ERROR: 29189 [ 977.333989] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.339489] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.345041] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.350586] binder: release 14059:14065 transaction 1116 out, still active [ 977.357649] binder: undelivered TRANSACTION_COMPLETE 18:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x1e7, 0x0, 0x0}) 18:33:26 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) 18:33:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=[@enter_looper, @register_looper], 0x3, 0x0, &(0x7f0000000100)="e23533"}) 18:33:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000010ae003afd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = socket(0x13, 0xa, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 18:33:26 executing program 0: restart_syscall() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0xfc, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x7, 0x6, 0x80, 0x6, 0x0, 0x52, 0x80200, 0x3, 0x2, 0x4, 0x4, 0x0, 0x6, 0x9, 0x8, 0x1, 0x2, 0x8, 0xfc0, 0x7, 0x0, 0x0, 0x7f, 0x400, 0xac3, 0x1, 0xe7a, 0xef8, 0x0, 0x4, 0x40, 0x5, 0x9, 0x8c, 0x637d, 0xe55, 0x0, 0x101, 0x4, @perf_config_ext={0x5c, 0xef8a}, 0x8000, 0x0, 0x1, 0xa, 0x9, 0x3, 0x3fffc0000000000}, r0, 0xb, r1, 0xd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) getitimer(0x2, &(0x7f0000000080)) [ 977.362830] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.368305] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.373951] binder: release 14040:14045 transaction 1113 out, still active [ 977.380958] binder: undelivered TRANSACTION_COMPLETE [ 977.386220] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.391833] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.397371] binder: undelivered TRANSACTION_ERROR: 29201 18:33:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0xc) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x804) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000e80000000000000000000000000000000000000000000000000000000000000000e8fbc75200f674d105f1f597e1b88edcf16fc74f27d1170483a888f38dba8015e5bfe1a21170ca36bd9e8103c450a56538f2671ccddf5352f596430dc617c977a0de7d56024f19f195320d96ce7a399de07169dd9ec087d57979311e21488a66868d4b2f7819612558540824ba3e0c4d7ebfbd9452fdd4a20409fed43a5abb24002b96bff752c942064643bf5001f69c8284c8883e8e0b51773e965c696eae6f44eafc56c3b56df90fca0abdb2c53ceedab541a0"], 0x0, 0x0, 0x0}) 18:33:26 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@rand_addr, @dev, 0x0}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'teql0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x28c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x128, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0xc33, 0xfffffffffffffffa, 0x7f}, {0x80000001, 0x5f, 0xfffffffffffffa32, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xb60b203}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4041}, 0x4004000) r8 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='nr0\x00', 0x10) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=[@enter_looper, @register_looper], 0x3, 0x0, &(0x7f0000000100)="e23533"}) 18:33:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000be3aa92556d10a5d5091d300000000000000000000000000001bac973df42395206a9de0e1fef258c39e86a9bd2793f7d9b55794e25eb43a0796c5c64e2dd7245895451b671c727dccc60204763c158240ba5730eb796b36119238"], 0x0, 0x0, 0x0}) [ 977.467347] binder: 15075:15090 transaction failed 29201/-22, size 0-0 line 3255 [ 977.487354] binder: release 15081:15083 transaction 1280 out, still active [ 977.487359] binder: undelivered TRANSACTION_COMPLETE 18:33:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ab00052ed0bfcef8b5d1299c3e024b0b3636882268774b45fd95", 0x1a, 0xfffffffffffffff9) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', 'big_key\x00'}, &(0x7f00000001c0)='/dev/binder#\x00', 0xd, 0x2) keyctl$invalidate(0x15, r1) 18:33:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=[@enter_looper, @register_looper], 0x3, 0x0, &(0x7f0000000100)="e23533"}) [ 977.487394] binder: release 15081:15083 transaction 1279 out, still active [ 977.487398] binder: undelivered TRANSACTION_COMPLETE [ 977.502541] binder: 15078:15092 ioctl c0306201 20000440 returned -14 [ 977.575143] binder: 15101:15109 transaction failed 29201/-28, size 0-0 line 3255 [ 977.584863] binder: 15101:15109 transaction failed 29201/-28, size 0-0 line 3255 [ 977.585100] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.585271] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.616000] binder: 15099:15108 transaction failed 29201/-28, size 0-0 line 3255 [ 977.656805] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.670294] binder: 15075:15090 transaction failed 29201/-22, size 0-0 line 3255 [ 977.670611] binder: undelivered TRANSACTION_ERROR: 29201 18:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/149, 0x95, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x2200, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0xffffffffffffffda, 0x1, {0x5}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348402000000000000000000000000180000000000000010000000000000000000000000000000000000000000000000000000000000000000000000f000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) 18:33:26 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x101, 0xc48, 0x89, 0x6, 0x4, 0x80000000, 0x6, 0x100, 0x55386e6b, 0x80, 0x1f}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 18:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000aff200000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x40, 0xffffffffffffd1df, 0x1, 0x5}, {0x100000000, 0x9, 0x401, 0x100000000}, {0x1, 0x3f, 0xc9f, 0x3}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000180)={@local, @local, @remote}, &(0x7f0000000240)=0xc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) [ 977.683469] binder: undelivered TRANSACTION_ERROR: 29201 18:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x30, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xd0, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000040)=[@fda={0x66646185, 0x0, 0x4, 0x3b}, @flat={0x736a2a85, 0x0, r1}, @flat={0x0, 0x10a, r2, 0x2}], 0xffffffffffffffff}, 0x6}}, @increfs_done={0x40106308, r3, 0x2}, @enter_looper, @enter_looper, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f00000001c0)=[0x18]}, 0x4}}, @acquire_done={0x40106309, r4, 0x4}], 0x47, 0x0, &(0x7f0000000340)="e5f8acf7dc49f907df0a32bbc968bb4c77211bb614eab8fb607153e506575d6bc8af377f9f8d36add888f7dee3cef7cb79d975eced6e58fddea832f072e9769df73d94435b3814"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000e8aa381930b0c95383191330e341937c5087fa7158784cc702b48c17d4d86729692374a3ca62c0f98e04af9682fbbe9f2cd96e9c009e07144040fd9a519d4726976d07000cfc6608381fcc21de810f886a7804c6ac04dc7f3d79db73e5c558b304eeb1900054c5bad2a819897ea309883bd8c834a81e20a59732a2108867b9cbaf7a2a47c6a23f081f9960c50000000000"], 0x0, 0x0, 0x0}) 18:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000000000002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) 18:33:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x5, 0x1, 0x26c3}, 0x7fff, 0xfffffffffffffffd, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000001000000eb00000041b05cc96f000000000000000000000000000000000000000000000080000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000001c0)) [ 977.727761] binder: 15123:15128 transaction failed 29201/-28, size 0-0 line 3255 [ 977.730177] binder: 15125:15132 got transaction to invalid handle 18:33:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000001c0)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8}}, [""]}, 0x24}}, 0x800) 18:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x1, 0x1, 0x3ff, 0x4, r1}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x400, 0x8}, 0xc) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) accept$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 977.730186] binder: 15125:15132 transaction failed 29201/-22, size 0-0 line 3118 18:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x40200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0x1, 0x2, 0x1}, 0x5, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0xf8433425fc52985f, 0x0, 0x0}) write$selinux_create(r1, &(0x7f00000001c0)=@access={'system_u:object_r:sshd_key_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3}, 0x44) 18:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000000c0)=[@request_death={0x400c630e, 0x3, 0x3}], 0x0, 0x0, 0x0}) 18:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000003314150bf0c2cb025ccd1dbdf4f8f78a000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) [ 977.731589] binder: 15125:15133 got transaction to invalid handle [ 977.731597] binder: 15125:15133 transaction failed 29201/-22, size 0-0 line 3118 18:33:27 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 977.731956] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.732043] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.756512] binder: 15121:15129 transaction failed 29201/-28, size 0-0 line 3255 [ 977.758789] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.816183] binder: 15139:15144 got transaction to invalid handle [ 977.816195] binder: 15139:15144 transaction failed 29201/-22, size 80-0 line 3118 [ 977.821570] binder: 15139:15144 got transaction to invalid handle [ 977.821580] binder: 15139:15144 transaction failed 29201/-22, size 80-0 line 3118 [ 977.821670] binder: 15139:15150 transaction failed 29201/-22, size 0-0 line 3255 [ 977.821899] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.823643] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.823655] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.895371] binder: 15154:15158 transaction failed 29201/-22, size 0-0 line 3255 [ 977.895391] binder: 15154:15158 ioctl c0306201 20000000 returned -14 [ 977.899835] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.947581] binder: 15166:15168 transaction failed 29201/-28, size 0-0 line 3255 [ 977.962840] binder: 15167:15171 transaction failed 29201/-22, size -1149802103363862528--811459590007632958 line 3255 [ 977.962968] binder: 15167:15171 ioctl 400454c8 0 returned -22 [ 977.966036] binder: 15167:15171 transaction failed 29201/-22, size -1149802103363862528--811459590007632958 line 3255 [ 977.975096] binder: undelivered TRANSACTION_ERROR: 29201 18:33:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3b, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b631843fdea3617", @ANYRES64=r1, @ANYBLOB="01634040000000000000000002000000000000000000000010000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="8561646600000000020000000000000000000000000000003800000000000000"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f630c400300000003000000000000000663044001000000"], 0x9494101c2f1e10ba, 0x0, 0x0}) 18:33:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x10000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000bb09d58b794cf90f770000000000000000000000000000000000000001000000000000000000000056cdc8381266e76400000000000000000000000000000000fcffffff000000"], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) flock(r0, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)=[0x7, 0x8]) prctl$PR_SET_DUMPABLE(0x4, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) 18:33:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000040000000000000000080000000000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4002) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x4, {0x7, 0x1d, 0x886, 0x100000, 0x4, 0x8000, 0x7}}, 0x50) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) ptrace$setsig(0x4203, r2, 0x5, &(0x7f0000000180)={0x32, 0x2, 0x8}) [ 977.981677] binder: 15167:15173 ioctl 400454c8 0 returned -22 [ 977.982335] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.982372] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.136291] binder: 15123:15128 transaction failed 29201/-28, size 0-0 line 3255 [ 978.136585] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.150778] binder: undelivered TRANSACTION_ERROR: 29201 18:33:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e800a16f3fd4a4fb58a98d4caf42ec9472f7c81b2eb9c0117e97d4879ea41743d9b54324b0012d35f5e3d3d6ba6d8013770511339bd3915a456ce6e4"], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) [ 978.179931] binder: 15178:15181 transaction failed 29189/-22, size 0-0 line 3118 [ 978.193059] binder: 15180:15183 transaction failed 29201/-22, size 0-4194304 line 3255 [ 978.203769] binder: 15184:15187 unknown command 1125671691 [ 978.203778] binder: 15184:15187 ioctl c0306201 200003c0 returned -22 [ 978.220678] binder: undelivered TRANSACTION_ERROR: 29189 [ 978.223198] binder: 15184:15189 unknown command 1125671691 [ 978.223209] binder: 15184:15189 ioctl c0306201 200003c0 returned -22 [ 978.293396] binder: 15180:15183 transaction failed 29201/-22, size 0-4194304 line 3255 [ 978.322701] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.328291] binder: undelivered TRANSACTION_ERROR: 29201 18:33:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) recvfrom(r0, &(0x7f0000000180)=""/213, 0xd5, 0x2001, &(0x7f0000000280)=@sco={0x1f, {0x7, 0x9, 0x1, 0xffffffffffff7fff, 0x8, 0x6}}, 0x80) bind$packet(r1, &(0x7f0000000140)={0x11, 0xf5, r2, 0x1, 0xffffffffffff0001, 0x6, @dev={[], 0x16}}, 0x14) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="bdf054d733b3a740ca90e67c7e6d0437", 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:27 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 18:33:27 executing program 3: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80000) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) syncfs(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 18:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x302f, 0x100}]}, 0xc, 0x3) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x8001, 0x55, 0xffffffffffffff01, 0x2, 0x3, 0x7, 0x15d, 0x40, 0x3c8, 0x7, 0x7, 0x38, 0x2, 0xffffffffffffff7f, 0x81, 0x8}, [{0x5, 0x7fff, 0x16, 0xff, 0x7fff, 0x0, 0x1, 0x8}], "110ba5a7067de8859e40d99e01d238ccb0a3d53e7632e55566c5d56fd2d7b774e6c9a30aef994d9a34dfd42e88ec4460cebf91111476328855f3a70c59a2f5f9b2e6662361fd7786adc828ff881f5cc10e9b56e1ae02036f7a77e8d355d4dc3ac379e36cd083a3ad6805e7a57fcad7b518f527eb7989c85c6c85d48f0819e65bca067230dddf4ecb08e9e3a02208868098c30f88d1c8974d0b1f60e81e6fd838ade8d6830bf1138186469b9ccb99f9053a25e9c6db89111fa8e2e0d8184c60415bdeb900170d3d866d3aae548d69784744979974567ec851af4f9bcc09a16c1f73d7d66f08d4", [[], [], [], [], [], [], [], []]}, 0x95e) 18:33:27 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl(r0, 0x0, &(0x7f0000000040)="1b741181924ccea60909638389185abf75ce25") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x28000, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1b, &(0x7f0000000100), &(0x7f0000000240)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000000000000000001694e794ea9d8977000000bb37d7be00000000000000000000fbffffffffffffffe8c459a0919ac0bba9f89cd14ec60cc92f3be33b38355e05ba0b7305bfa05e899ca295b4337c4ba4ab03ab4408abba6ca8f176592b0279a355e9f19f7ecca54d3c1b0f2ef25df8228bbcdd37f12f99779674999c4fa9b918fe92f1fa4dfad957069d0cd88a1100000000"], 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x2) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000480)=""/4096) 18:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484f000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) 18:33:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x64, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x2}, @request_death={0x400c630e, 0x1, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x48, 0x48, 0x18]}}, @release], 0x0, 0x0, &(0x7f0000000180)}) 18:33:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 978.769587] binder: 15201:15205 transaction failed 29201/-28, size 0-0 line 3255 [ 978.773355] binder: 15198:15206 transaction failed 29201/-28, size 0-0 line 3255 18:33:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="c16113e31841ac68c68253f8d9be68560640f308e34b869670863dc1b911ec5bddb7e1eb7a68fc29b74148ff52efcbb5e096a89e74289ae631b25da65082b4a37b88b7eed2925d86e7483c64703241bb3bb594f1f8e9ff48f9ddb5d8bb63c22da7a3c60c1dc578e225679fec8918a9b3eaec2260c199a61145a635dad5673b7b739ae0cd981928d14aa000a95627d540fa72be409eec671665e6c86d74500cda27cc36475ffd41f75094f69ae16b08f4de857a1bf37fbb9fddcd2d0a82b4c550", 0xc0, 0xffffffffffff481e}, {&(0x7f0000000200)="3a47f9ea33603f8e1e3b6743785b1945f7aa05bfde96ac255370d86327f1771b5c25c79f555764067dafcf6c99d5672573fc34da34e8bcaa4f413a5c57a87427f348078f12e07c98e8b282872679a33c19e7b447c77b94e2b768731846637ecd82cbb6f38a2ba6d17e9258b0b39a36279827bcd53da070c5942b6d2092b615480ac74b", 0x83, 0x401}], 0x9, &(0x7f00000002c0)={[{@utf8='utf8=1'}], [{@appraise_type='appraise_type=imasig'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000975ec15374ff01c716daee18ecd3e902591a96d5d5b694dac2edcbc86487f439cbab4e96eeea0c7032b40af6a7d4e5aba7f939dc388a268f76c1a1db3bb87fe4e61d00dd9483"], 0x0, 0x0, 0x0}) 18:33:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xffffff0e, 0x0, 0x0}) [ 978.782537] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.787887] binder: 15202:15208 transaction failed 29201/-22, size 1585267068834414592-33646833567066004 line 3255 [ 978.812749] binder: 15202:15208 transaction failed 29201/-22, size 1585267068834414592-33646833567066004 line 3255 [ 978.814730] binder: undelivered TRANSACTION_ERROR: 29201 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000100)="000000000000000000004b5f000a5f936bb75f140770bb0d76638a6b314dce2fa3c78ace5ffaa4c0c1ee47f1ce12c42c4e7ef1a703e34098575da45295177def0f155a162bb3df1bc11a74fe84e5d0c72899ca106d6090449f5cc5e64a568efbc873bfdb1ee40bc00245bb") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 978.814789] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.890610] binder: 15222:15226 ioctl 80044501 20000480 returned -22 [ 978.890746] binder: 15222:15226 transaction failed 29201/-28, size 0-0 line 3255 [ 978.899641] binder: 15222:15226 ioctl 80044501 20000480 returned -22 [ 978.899740] binder: 15222:15233 transaction failed 29201/-28, size 0-0 line 3255 [ 978.900139] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.900165] binder: undelivered TRANSACTION_ERROR: 29201 18:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:33:28 executing program 3: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) rt_sigqueueinfo(r3, 0x1d, &(0x7f0000000480)={0x16, 0x7ff, 0x27511a3a}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@remote, @in6=@loopback, 0x4e23, 0x0, 0x4e24, 0x4, 0xa, 0xa0, 0x20, 0x3f, r1, r2}, {0x2b9, 0x60f, 0x2, 0xd25b, 0x0, 0x40000000000, 0x1b8, 0xffffffffffffffff}, {0x80, 0x100, 0x6}, 0x4c2a3c19, 0x0, 0x0, 0x1, 0x2, 0x4017ed3478f9789f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0xa, @in=@multicast1, 0x3504, 0x4, 0x3, 0x5, 0x0, 0xffffffff, 0x7}}, 0xe8) sendto$inet6(r0, &(0x7f0000000180)="1b916a63e10b844541a6eb9b3d42e0688c5bf36c1fedf132689e1890e488775c4578aa62b6acd532f8142e9758474281ae847dfadd4b5f26a5d4de27e171d30bfee2a475b174f4f1d8a55bc11420ee5d640fe82ad8ac7975ac92141cb83572939d07c04486f4d9f81b8b4cbb8a0b13145de3b54f1c1c76314617503837c714d5687c94422da1c5d381521986a32321bde2dd320fc68d3d99a1695c1fca75cc0cc15fe32ad0603a8fe0658effa6896f1ddba032da5722b51fa66bb4172c90bf3677127768e9814abffee8014158f943945607f744ccea4165fc3764921b3c7de7c62fddf64254", 0xe6, 0x40, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @mcast1, 0x40}, 0x1c) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_proto_private(r5, 0x89e5, &(0x7f0000000000)="3d5843a957e64fa627416fb9ac0f2ef2f9e94114bb7db95b7b") ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:28 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x103000) fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x180) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup3(r1, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:28 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x20400) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000040), &(0x7f0000000080)=[0x38, 0x70, 0x48, 0x0, 0x18]}}], 0x6a, 0x0, &(0x7f00000001c0)="3c8bfa0a6126d0176e3c69630782af5461d3bd6a52e615aa15e21b02e06d82f7fd3dfac1da70ae084bbdc8bebac1e1249f96ccbbb8b5467c9c84ee27151cf1a24f60a3c8af3bb95bf1509e78446212b9963e1d657c4c8fc05c4233e79107bf7d5f6c3655b2a2ea0de411"}) 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'bridge_slave_1\x00', 0x9}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 978.903771] binder: 15224:15229 transaction failed 29201/-22, size 0-0 line 3255 [ 978.913798] binder: 15224:15229 transaction failed 29201/-22, size 0-0 line 3255 [ 978.920363] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.920394] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.016889] binder: 15201:15205 transaction failed 29201/-28, size 0-0 line 3255 [ 979.017225] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.030279] binder: undelivered TRANSACTION_ERROR: 29201 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00'}, 0x30) fcntl$setown(r0, 0x8, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000000000000000000000000001000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/policy\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000a80)='./file0\x00', 0x200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000680)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8) r4 = syz_open_procfs(r2, &(0x7f0000000940)='cmdline\x00') ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000980)={0x0, 0x4, 0x8922, 0xfffffffffffffeff}) connect$inet6(r4, &(0x7f00000009c0)={0xa, 0x4e20, 0x74, @mcast1, 0xffffffff7fffffff}, 0x1c) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000140)="ee8b78d5d45cb598b7cc6809a1bb0aea239036683e360401b9ef34244398900f552698d2b953c07b1a6890c4bc3d00820357fe8bbfadd481adf3af56beeb28700ec92b06e3002926b45979a173ea41392bdf", 0x52}, {&(0x7f00000001c0)="c10380c1696336dbd05466e78318b8dcf452bf17209df9e4fb23d4d2ce011717b7a5709b57c7b29ef825c411a5f5f589a7630b93f316c2df0f430418be9fd4bd070b598be94a733b9ae3545bb4344aca1a09bd25b0ab5179e8b4cbfe6c15977b1469d44da7446b043b26d5049d021def762dbe22a3f37a63058f5d3e2ea852d7cb485aed5785bcbeced7b26cc0b65014f38cc66ee119b71d21aff29f61172b67c2c3c78fe5d441a1c2bc0a281c6c5ad5e5da211d95422676e216", 0xba}, {&(0x7f0000000280)="e9d9680a6fded1b43740f11f8aaf684aaddd1c087c670f267a67d6f329b9c50d6162f634fe62432a332468375a659df3e3e3d11b496bc5c63557a2bb43f46afdc723fc83ecb9f689acba2eadb52f0128d2f84d01fb9874014610f982cd91f83ca462d54bbab718735596ed0e2ae4211a16150206d2a7fd07d8e30089c7f053b84c3653345385f22ca7087eaab2116793a99c1ccfbcf05dfa3bc79c79ba51f6298d47ccd49ee0ccac54ea9f49ca24dba4d0d4f6067e68259e53ed8a17d3b8f68c39c9f619ae31f5528f00db3a3cd8ad9f67496335a1b4e6c5256998ca6bd6ccc9", 0xe0}, {&(0x7f0000000380)="4ec3eb87242893cf49f55db90aad99d83958e3f1f393eea4a0bff3e4e1f802eb90741fa516ada9e21619bfd9f71791bf3ed737c8a0d23e1faf21ce28f89d754759651f5422e586d41f773ff06c3bff4d176a6e9fb446fdc18dd5a37d396d1867459ecaf2e59f2d184d0e317fe3d39b80b21ba4", 0x73}, {&(0x7f0000000480)="4d753998d8bf3791102e5203b488a9258aa88a9122b8910e5db696c7d520a93712d3ee902e3c1fa5d6c3d6887f9bad5e96cf29f9d6b97ebe2f377c5a08de6cce1af3bfe3ddf0b5b1645e1f4f7d59c1301698f0e0a1d50ee16a3c1f94b5016aa638e5c21d9cf2ddbce78c9c761abfed50f2e5b0dce55dec82c2705a2441240b156f101e3f54974c7325506f8f2d9d313960037c", 0x93}, {&(0x7f0000000540)="011421547c0be99c3275a17b8414f4cacea128ad420da68b365f972aca76c490e7ffe779184e96c3999111af727358ed814aee5c0799c48f4d5d910cf6618e8ede49b269d320d4006dda02a8841117a00798a2c111def95373f6e8c07e97febfea9343fd4266bb60350b16102f70ed1269bc3ba6f091ec59bc9f856dffe900236d14ad19abb912db0210fc", 0x8b}], 0x6, &(0x7f00000008c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r5}], 0x20, 0x8004}, 0x40000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x420300, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000080)) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000a00)={0x0, 0x6a00000000000000, 0x1, 0xbdb, 0x17, 0x4, 0x7, 0x20, 0x1, 0x400}) [ 979.076394] binder: 15240:15247 transaction failed 29189/-22, size 0-0 line 3118 18:33:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20130, r0, 0x33) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000073000000e8"], 0x0, 0x0, 0x0}) 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:28 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x210001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xe0, 0x0, &(0x7f0000000240)=[@register_looper, @exit_looper, @reply_sg={0x40486312, {{0x1, 0x0, 0xb22f, 0x0, 0x11, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000080)=[0x28, 0x38]}, 0xffffffff7fffffff}}, @free_buffer={0x40086303, r1}, @request_death={0x400c630e, 0x2}, @acquire_done={0x40106309, r2, 0x4}, @register_looper, @transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000180)=[@fda={0x66646185, 0x4, 0x2, 0x18}, @fda={0x66646185, 0x1, 0x3, 0x11}], &(0x7f00000001c0)=[0x28, 0x38]}}, @increfs={0x40046304, 0x3}, @free_buffer={0x40086303, r3}], 0xd, 0x0, &(0x7f0000000340)="f0dd63e8c81db092140ad34b04"}) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000b0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) [ 979.091897] binder: 15249:15253 transaction failed 29201/-28, size 0-0 line 3255 18:33:28 executing program 4: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x4, 0x80000001, 0x401, 0x1, 0x4, 0xaf7c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xd6, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) [ 979.095443] binder: 15249:15253 transaction failed 29201/-28, size 0-0 line 3255 [ 979.099338] binder: 15244:15252 transaction failed 29201/-22, size 0-0 line 3255 [ 979.102480] binder: 15244:15252 transaction failed 29201/-22, size 0-0 line 3255 [ 979.106450] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.106486] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.113527] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.169016] binder: 15264:15268 unknown command 17 [ 979.169026] binder: 15264:15268 ioctl c0306201 20000440 returned -22 [ 979.172780] binder: 15264:15268 unknown command 17 18:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000040)={0x4c, 0x75, 0x1, {0x41, "a739d9353b2144d05a524ab3360c0f1ec29979b77d1accb8562dd599d8e96d54055489eb0b3cb1c7ad1f2e2b55e9b605d58f4949ea04b378d6a3d98fecb3984c17"}}, 0x4c) 18:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xb4, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) fcntl$getflags(r0, 0x40b) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) write$selinux_create(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="73a17374656d5f75a54705448ab9ae58ef91c5ba3a6f626a655f696e697472635f657865635f643a7330202f7573722f7362696e2f6e74706420303030303030303030303030303030303533000000476a2094d1099a8ce3e058d38c215125686f4ffec1aa8b8a40e16d6a7a1b1cb32a59b1c3"], 0x50) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peekuser(0x3, r4, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000000000000000000000"], 0x0, 0x0, 0x0}) getsockopt(r3, 0x81, 0x9, &(0x7f00000001c0)=""/72, &(0x7f0000000240)=0x48) 18:33:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000), 0x84800) 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="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", 0xfc, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="b983658b", 0x4, r3) flock(r0, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000080)=0x0, &(0x7f0000000280)) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000100)={0xa0, 0xffffffffffffffff, 0x1, {{0xf5, 0x1, 0x10000, 0xf9, 0x7, 0x1, {0x6, 0x8000, 0x6, 0x51, 0x5, 0x12, 0x6, 0x7ff, 0x7, 0x36, 0x1, r2, r3, 0x0, 0x12e}}, {0x0, 0x5}}}, 0xa0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000780)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgrp(0xffffffffffffffff) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000a80)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000bc0)=0xe8) r11 = getgid() r12 = gettid() lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000cc0)=0x0, &(0x7f0000000d00), &(0x7f0000000d40)) sendmsg$unix(r1, &(0x7f0000000e80)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000300)="f2ba33ed4f2fb26c3b11a7eaed262ca0ff26f45cbe85d59f66144d9b7801627fc33e26c14b085dff4a2af483aff20911e9bb8aa017aa1f56ab92687cbf8db7b94c137c294a067fb10c670fbc78f77f138e325896b7faea3f64e580418641b1447016e43d34359030bdfc980349c250b5e6f5d8fa69f839c7f9409192513202609e4dd9a228fd468196db17b5ef8e894f4caaed97b73b23784155ead62d3f891849588e290749c1f49e890664d3ad104ee093ee7638a79821d44410be93d083b5445c671bf65d450d8937544314b2b7166db271eb1bc788ee278c11057d", 0xdd}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000580)="4b0353a0d10d9ba32ba92ce8164e7753f2272391b3340a3fc9f6aa96027a62758d9c1cbd194251c814ac6015108007106442de5d3c301a81c094933f8d5e11f93de59744d2439e3ea842a0aee4cfb06711ed783125786fe4c0e52fcba4b0da43cf63eb28f0fc3f9bffa9d2dc31a339c6215dbe0271e126976f3f273a42441ba46d8e15", 0x83}, {&(0x7f0000000640)="9b27ae59d3e9b91fc044e696224c65c96e1a4ab29d4d62a9c3b9923a10fef3f6c44f6d2ff205a83931d14ee6bb54aa9668e55aaf4d40e1290fb2343306685bd92ea88fca7ec4eccebae0e78c493b021c6cfc0495234165b23487f3", 0x5b}, {&(0x7f00000006c0)}], 0x5, &(0x7f0000000d80)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r1]}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xd0, 0x4040}, 0x10) [ 979.172789] binder: 15264:15268 ioctl c0306201 20000440 returned -22 [ 979.201688] binder: 15262:15271 got transaction to invalid handle [ 979.201698] binder: 15262:15271 transaction failed 29201/-22, size 0-0 line 3118 [ 979.208453] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.317258] binder: 15240:15281 transaction failed 29189/-22, size 0-0 line 3118 [ 979.325430] binder: undelivered TRANSACTION_ERROR: 29189 [ 979.331075] binder: undelivered TRANSACTION_ERROR: 29189 18:33:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x129000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x1, 0x2, 0x2, 0x4, 0x37, 0x7}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00c6404000000000000000000000000000000000000000006d8114cdd768b95b2600000000000000000000000000fcffffdd234a85fe5fdabd029e7fab454b1b0000000000e8"], 0x0, 0x0, 0x0}) 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x9, 0x81, &(0x7f0000000100)="bf7221ff549d02db93254354dde9eca3c56e385f947e5be2d590c2e1b120a280fd0de55001b906c600230127f2b89beae5ba0d5f1a4da95cce26956cb570ca22dc311d4f457d2f970f9d783637a9f0edfb2a2d604e8d566a0c4fd2cff0cb696b2c143c63e1077d3842ed0f5dc7ea862044a277775a14549dc483dd05f3d90cf95d02470f28c1dfc8e135c467a959066670fadfd42b2cc83e3d3f64b2e64636bab6be90c4291561580403250b0cb5666fd7d52efe601af91bde8a6600328f676e1fe776b109c1129f939e00ca2dff994c9f5a60ba6ab48cc20ee37d450d97323d", 0xe0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") sendto$inet(r0, &(0x7f0000000280)="497f9ca634f84783a8cfbf38a0ecba3c84aeca867bff86eb31e31d6d691411d394e5a46e6a2769b5d6405cf9d1ab6d3208439ccb477b06513d8ea6c716012e5d7f63a7d507c56a6a24b34a76fe0c37170e", 0x51, 0x20040001, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) listen(r1, 0x7) r2 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @broadcast, 0x0}, &(0x7f0000000080)=0x2f) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000480)={@loopback, @remote, @loopback, 0x0, 0x3, 0xffffffff, 0x400, 0x697807fa, 0x20, r3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 979.372673] binder: 15285:15290 transaction failed 29201/-22, size 0-0 line 3255 18:33:28 executing program 3: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="fc950a5e4605a8c7544c134c61e0280d9276ff5a17ddc379ea7e2ab97457e35298819f3b24063d59da285797265caf4f5f8c873feee0eeed6284d71c6309ff219aa0b035d626bbc1ee660c4c04adf0509306ea7c2f5231c81a6bcb3cd7f1d3f1a8d4b8a890c300939e68cd37c11fe9e9102869e15eb1f5caf429b1045ad1cd2e8e1ae5c3d3109f251f7b", 0x8a, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000480)="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", 0x1000, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:', r1}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x501000, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000340)=0x8) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000300)={'eql\x00', 0x400}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634861000000000000000000000000000000000000e4ff000000000000000000000022000000000000000000000a0000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 18:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000040)="c443ed7e945382000000fec46279bb21ab260fa0c4c1b1ea18c4417829d564420ff4ba0b0000008f297c81f8652680a4336cfa000000c40205282487") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 979.401979] binder: 15283:15293 unknown command 273 [ 979.401997] binder: 15283:15293 ioctl c0306201 20000440 returned -22 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4200) write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x12, 0x3, 0x2}}, 0x14) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000480)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000a8e76b573ae800000ddd8cab213d5eaad8c3c79ef2bbd533"], 0x0, 0x0, 0x0}) 18:33:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=')$-!\x00'}, 0x30) syz_open_procfs(r1, &(0x7f0000000080)='stack\x00') 18:33:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) listen(r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x84010, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="580400001400192340834b80040d8c560a067fbc450500000000000058000b480400945f64019400050028925a14c4010000000000008000f0fffeffe809000000fff5dd000000100000000004", 0x64}], 0x0) 18:33:28 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x7fffffff, 0x2}, {0x8, 0xfd}]}, 0x14, 0x1) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f00000001c0)='%^{@cpuset\x00', 0xb, 0x1) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x22d, 0x0, 0x0}) [ 979.501846] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.517791] binder: 15315:15321 unknown command 1632133905 [ 979.530708] binder: 15315:15321 ioctl c0306201 20000440 returned -22 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="222a3d385f569333ecee45eba3711931e2f59e347fc76f27fb57ac273091af1b1f7c4563d4f7423fec545e84189316214bf2a9fd30ed37582ee87f4207e8dbdd25c4d03b3d84f7fa1d092c984683f872f150c9fed259773f992945d1670034", 0x5f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1b, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 18:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) 18:33:28 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x44000, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) dup2(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0ad71f093c12a41d88b070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 979.579747] binder: 15326:15331 transaction failed 29201/-22, size 0-0 line 3255 18:33:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x58, 0x30, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x4, 0xe}, @fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, r1, 0x3}], &(0x7f0000000240)=[0x20, 0x18, 0x48, 0x38, 0x38, 0x38]}, 0x80000000}}], 0xfffffffffffffc79, 0x0, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 979.623192] binder: 15323:15339 got transaction to invalid handle [ 979.627735] binder: 15326:15331 transaction failed 29201/-22, size 0-0 line 3255 [ 979.631210] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.631265] binder: undelivered TRANSACTION_ERROR: 29201 18:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 18:33:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340409f00000002000000000000000000000000000000000000000000ffe4e800000000000000000032f7030296c07268b6ac13b175af000000000000136e49f6f9b98b9710dbf52a251b25d5663427dde706abcb1a93ecdc84d4f4aef791b4f2258cebc87cc33a3508af5fd746518b6cb3fbaad03b874217ddd1a2cac0469284545fbdeded35be0a80ee2bcf5b78421309524ee8b78b59e5c720436833dc3caf18e2b649acbad54d5cee06a93db207384721695ce7617b97a4d06bc1a21493ce5a0000000000000000e4d4d9373bc7d81ebbb935156116b2bc00000000e6043a384d3e370ef489245eda7eb6eebfeafd1b6322cd48a246f68470e8e4bd2e15cb8a990a73ee07ef99e7d200f3122b7af401306b48a64d319773a2b24261f1549256d20f9b5bbe768040e34f5daa6ff5c45bb190e1"], 0x0, 0x0, 0x0}) 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 979.670805] binder: 15323:15339 transaction failed 29201/-22, size 0-0 line 3118 [ 979.691375] binder: 15348:15349 got transaction to invalid handle [ 979.691385] binder: 15348:15349 transaction failed 29201/-22, size 88-48 line 3118 [ 979.691405] binder: 15348:15349 ioctl c0306201 200000c0 returned -14 [ 979.708735] binder: 15348:15352 got transaction to invalid handle [ 979.708746] binder: 15348:15352 transaction failed 29201/-22, size 88-48 line 3118 [ 979.708768] binder: 15348:15352 ioctl c0306201 200000c0 returned -14 [ 979.713089] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.713117] binder: undelivered TRANSACTION_ERROR: 29201 18:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r0, &(0x7f0000000080)=""/49) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000002000000000000000000000008fcd7b13ffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 18:33:28 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x88, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x5, 0x1}, @release, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000140)=[0x18, 0x40, 0x0, 0x40, 0x48]}, 0x2}}, @release={0x40046306, 0x4}, @clear_death={0x400c630f, 0x3, 0x3}, @free_buffer={0x40086303, r2}], 0x82, 0x0, &(0x7f0000000280)="9f0b5ae69ca0fe442b1f5660e91b6826e301a50aa1f9067af872348aa5ecda3be3ae179841223b2fd28d2719a7b6a43a84cc2e8b710af56b28a6216e636ec94a9c12bb2f1ec407aa3f643e9dcfe51090d89bca731a4750c6f97e4d6a6dadda11248fbdf271a5e3d0900b292003a8ce53293bd18421822224cc9760a80eec1d4e37a1"}) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffce3, 0x0, &(0x7f00000003c0)=ANY=[], 0x1f, 0x0, 0x0}) 18:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x20) [ 979.774378] binder: 15323:15360 got transaction to invalid handle [ 979.780660] binder: 15323:15360 transaction failed 29201/-22, size 0-0 line 3118 [ 979.788818] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.794399] binder: undelivered TRANSACTION_ERROR: 29201 18:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 979.854605] binder: 15361:15367 transaction failed 29201/-28, size 0-0 line 3255 [ 979.863033] binder: 15364:15369 transaction failed 29201/-28, size 0-0 line 3255 18:33:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x233e) setsockopt$inet_int(r1, 0x0, 0x80000000000005, &(0x7f00000000c0)=0x82, 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, &(0x7f0000000080)=0xc) 18:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 979.863734] binder: 15364:15369 transaction failed 29201/-28, size 0-0 line 3255 18:33:29 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00'}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffffffffffff8, &(0x7f0000000040)="0adc1f127909a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/85) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400400000000000000000000000000000000000000000000000000000000000332390000000000000000e8"], 0x0, 0x0, 0x0}) [ 979.868303] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.868331] binder: undelivered TRANSACTION_ERROR: 29201 18:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 979.896620] binder: 15371:15376 transaction failed 29201/-28, size 0-0 line 3255 [ 979.897029] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.956260] binder: 15378:15386 transaction failed 29201/-28, size 0-0 line 3255 [ 979.966702] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.010858] binder: 15388:15394 ioctl 6609 0 returned -22 [ 980.011604] binder: 15388:15394 transaction failed 29201/-28, size 0-0 line 3255 [ 980.012309] binder: 15388:15394 ioctl 6609 0 returned -22 [ 980.018795] binder: 15388:15398 transaction failed 29201/-28, size 0-0 line 3255 [ 980.022291] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.022317] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.045439] binder: 15399:15401 transaction failed 29201/-28, size 0-0 line 3255 [ 980.046408] binder: 15399:15401 transaction failed 29201/-28, size 0-0 line 3255 [ 980.051114] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.051171] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.128771] binder: 15361:15367 transaction failed 29201/-28, size 0-0 line 3255 [ 980.128830] binder: undelivered TRANSACTION_ERROR: 29201 18:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(r0, &(0x7f00000001c0)=@x25, &(0x7f0000000240)=0x529) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) rt_sigreturn() r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r2}) socket$nl_xfrm(0x10, 0x3, 0x6) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz'}, 0x0, 0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 18:33:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000017b000000000000000000000000e4ffffff000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:29 executing program 5: timer_create(0x2, &(0x7f0000000040)={0x0, 0xb, 0x2}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{r1, r2+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 980.142788] binder: undelivered TRANSACTION_ERROR: 29201 18:33:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/raw\x00') lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x80, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}], [{@fowner_lt={'fowner<', r3}}, {@uid_eq={'uid', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, 'loGPL'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40081, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x1f54, 0x9, 0x7, 0x8}) [ 980.194447] binder: 15411:15416 transaction failed 29201/-28, size 8061184--2017612633061982208 line 3255 18:33:29 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0), 0x0) 18:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1179010000000000000000000000000000000000000000000100000000000000000000000600000022000000000023000000000000000000000003000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e22, @multicast2}}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[], 0xfffffffffffffee2, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x9, 0xfda, 0xff, 0x0, 0x1, 0x9}, 0x2c) [ 980.218895] binder: 15407:15419 transaction failed 29201/-22, size 0-0 line 3255 18:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000200)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000240)={0x7b, 0x7d, 0x1, {{0x0, 0x59, 0x3, 0xffffffff80000001, {0x24, 0x1, 0x7}, 0x10000, 0x16d, 0x7fff, 0x7, 0x1, '^', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xb, 'GPL)-[-bdev'}, 0xd, '/dev/binder#\x00', r2, r3, r4}}, 0x7b) 18:33:29 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x340, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=@newlink={0xa4, 0x10, 0x101, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x108, 0x4}, [@IFLA_XDP={0x70, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x4c, 0x1, {0x15, 0x9, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x5, 0x9, 0x0, 0x8, 0x70, 0xfffffffffffffffc}, @exit, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit, @ldst={0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x30}], &(0x7f00000002c0)='syzkaller\x00', 0x401, 0x48, &(0x7f0000000300)=""/72, 0x41000, 0x0, [], r2, 0x2}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_BROADCAST={0xc, 0x2, @random="20e5bdc76d70"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000680)=[@release={0x40046306, 0x2}], 0xfffffffffffffee7, 0x0, 0x0}) 18:33:29 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 18:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000380)=""/229, &(0x7f00000002c0)=0xe5) r2 = dup3(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) listen(r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x1f) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 980.225490] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.258237] binder: 15421:15427 transaction failed 29201/-28, size 0-0 line 3255 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x5e8) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x100000000, 0x6, 0x7552, 0x4, 0x0, 0x3, 0x5, 0x6d, 0x40, 0xba, 0x8, 0x4040, 0x38, 0x2, 0x1, 0x47f, 0x1}, [{0x0, 0x0, 0x2, 0x400, 0x9, 0x101, 0xb11, 0x7}], "a836c5f754175e55bd2fd7eba16e97ff99bdd0083d1c51d054ae5ce8a03663dcc50f4439bacc54f566d30032b5db93b44bbb380e9b22fe85bb3de81385e2ee8c85c18929", [[], [], [], [], [], [], [], []]}, 0x8bc) [ 980.266001] binder: 15421:15431 transaction failed 29201/-28, size 0-0 line 3255 [ 980.266360] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.266371] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.299789] binder: 15429:15435 unknown command 96529 [ 980.299799] binder: 15429:15435 ioctl c0306201 20000440 returned -22 [ 980.331520] binder: 15438:15443 transaction failed 29201/-28, size 0-0 line 3255 [ 980.334634] binder: 15438:15443 transaction failed 29201/-28, size 0-0 line 3255 18:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x3) write$selinux_user(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="753a6f626a05b69e1ae341c1c12a6170705f646174615f66696c653a73303a633531322c636f646d5f7500"], 0x2f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80440, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) pipe(&(0x7f0000000140)) ioctl$TCFLSH(r1, 0x540b, 0x1) 18:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1163484000000000000000000000f2bc2afd660b849e2200000000000000003147d5ce683d95a33e"], 0x0, 0x0, 0x0}) 18:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x421}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004044) 18:33:29 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x101}, 0xf) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', r1) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x4) pipe(&(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r2 = getuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) [ 980.350164] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.350194] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.470077] binder: undelivered TRANSACTION_ERROR: 29201 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840d22a0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 18:33:29 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 18:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1, 0xff}, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x5) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 980.505628] binder: 15466:15472 transaction failed 29189/-22, size 1050907965-0 line 3118 [ 980.515839] binder: 15467:15474 transaction failed 29201/-22, size 0-0 line 3255 18:33:29 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000014c0)={0x2, 0x4e23, @local}, 0x10) 18:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL_GET(0x22) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{0x0, 0x7530}, 0x11, 0x0, 0x80000000}, {{}, 0x16, 0x0, 0x1}, {{0x77359400}, 0x1f, 0x5, 0x9}], 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = dup(r0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x80000000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x5, 0x7, 0x5, 0x4}, 0x10) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) [ 980.551961] binder: 15476:15481 transaction failed 29201/-28, size 0-0 line 3255 [ 980.556887] binder: 15467:15474 transaction failed 29201/-22, size 0-0 line 3255 [ 980.560238] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.560269] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.563601] binder: 15476:15481 transaction failed 29201/-28, size 0-0 line 3255 [ 980.564631] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.564659] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.637558] binder: 15489:15495 transaction failed 29201/-22, size 0-0 line 3255 [ 980.641862] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.681347] binder: 15501:15504 transaction failed 29201/-28, size 0-0 line 3255 [ 980.681539] binder: 15501:15504 ioctl 127d 20000040 returned -22 [ 980.681658] binder: 15501:15504 ioctl 80045200 20000000 returned -22 [ 980.684929] binder: 15501:15504 transaction failed 29201/-28, size 0-0 line 3255 [ 980.688865] binder: 15501:15504 ioctl 127d 20000040 returned -22 [ 980.689186] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.689215] binder: undelivered TRANSACTION_ERROR: 29201 18:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x389, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400000, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x5) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x300, 0x70bd2b, 0x25dfdbff, {0x1c, 0x80, 0x30, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1900}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_MCE_KILL_GET(0x22) 18:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@remote, @rand_addr, @local}, &(0x7f0000000040)=0xc) 18:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket(0x3, 0xf, 0x7c6c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) close(r2) 18:33:29 executing program 0: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xfffffffffffffffe, 0x10001}) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20000, 0x0) write$P9_RWALK(r1, &(0x7f0000000140)={0x23, 0x6f, 0x2, {0x2, [{0x0, 0x0, 0x5}, {0x4, 0x2, 0x4}]}}, 0x23) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:29 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x8000, 0x9}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x9, @remote, 0x7}, {0xa, 0x4e24, 0xfef, @local, 0xfffffffffffffffc}, 0xfffffffffffeffff, [0x4000, 0x0, 0x1f, 0xfffffffffffffffe, 0x8, 0x5, 0x1, 0x7]}, 0x5c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:29 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x3, &(0x7f0000000140)='-]\x00', r2}, 0x30) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 980.773495] binder: 15466:15472 transaction failed 29189/-22, size 1050907965-0 line 3118 [ 980.773686] binder: undelivered TRANSACTION_ERROR: 29189 [ 980.787581] binder: undelivered TRANSACTION_ERROR: 29189 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffb) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x10000, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x17}}}, 0x88) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) accept4$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={@empty, @empty, @mcast2, 0xb0, 0x2, 0x5, 0x400, 0x7fffffff, 0x80080000, r2}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000b80)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000bc0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r3 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x100000001, 0x4, 0x1f, 0x3, 0x6, 0x5, 0x80, 0x5}}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x0, 0x140, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000300), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0xff000000, 0xffffffff, @mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}, 0x7fffffff, 0x4586, 0x4, 0x4, 0x2, 0x10001, 'veth1_to_team\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@remote, @loopback, @multicast1, 0xf, 0x1}}}, {{@arp={@empty, @rand_addr=0x4, 0x0, 0xffffffff, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@dev={[], 0xd}, {[0xff, 0xff]}, 0xa876, 0x4, 0x2, 0x1, 0x6, 0x7ff, 'vcan0\x00', 'gre0\x00', {0x4ad684b94b5f6b2}, {0xff}, 0x0, 0x14}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @local, @multicast1, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x2, 0x3, 0x0, 0x0, "8cf0153a5a8d5b6ab926b325a46b3fbfd6e6d76b742da095a7d7e1065697db3120f9c639734728249bc50962769efc99aa88c2d1fc1321891b711ae7122e8209"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x501000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r4, 0x700, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) [ 980.834838] binder: 15511:15517 transaction failed 29189/-22, size 0-0 line 3118 [ 980.837531] binder: 15508:15514 transaction failed 29201/-22, size 0-0 line 3255 18:33:30 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x307000, 0x0) read$FUSE(r0, &(0x7f0000001480), 0x1000) 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f0000000040)}, 0x10) 18:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x40020000000015) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) close(r0) write$FUSE_DIRENT(r3, &(0x7f0000000100)={0x90, 0x0, 0x6, [{0x5, 0x1, 0x7, 0xffffffff, '$md5sum'}, {0x3, 0x100, 0x10, 0x0, 'posix_acl_access'}, {0x3, 0x1, 0x1a, 0x9, ']$selinux{eth0vmnet1user-.'}]}, 0x90) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) lookup_dcookie(0x0, &(0x7f0000000000)=""/52, 0x34) [ 980.840310] binder: 15508:15514 transaction failed 29201/-22, size 0-0 line 3255 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) ioperm(0xff, 0x7, 0xb14b) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xe7, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@flat={0x776a2a85, 0x1, r1, 0x3}, @flat={0x0, 0x101, r2, 0x2}], &(0x7f0000000080)=[0x60, 0x38, 0x0, 0x30, 0x20]}}], 0x0, 0x0, 0x0}) 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000800000000000000000000000400000000001"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="000429bd7000fbdbdf25150000000001040002000700080004000200000008000100070000004c00070008000300c901c96b3f70e939bc114b93f558f6ffff080001000400000008000300e9ac000008000200faffffff080003000100000008000200000000000800020000000000080003000004000008000300010100000c00010073797a31000000000c00010073797a300000000054000700080001000d000000080001001a000000080001001d000000080004000000000008000100020000000800020008000000080002000600000008000400f7ffffff0800010002000000080001001b0000000c00010073797a30000000002400070008000400ffff000008000100050000000800040001000000080002000000000035d560302a27072b19b8855b6c604756ef5cdb7648b3858d774cf938eb4f564f6f94b354c750bb948e23661e46677e30421ec252147111eb77e903d674aa90eb8db1327850c5e93ec37774413e6e3a6fd2334ad493b657528ece10bdab76c2c5f810b73339ff0a2c56d3509443230a57d4023d8b5ca8ff4e5d8848d45063a114a83adfd0b24ab1f8365cff7ccaa12a32"], 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0xffffffffffffff98, 0x0, 0x0}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) getdents64(r0, &(0x7f0000000600)=""/4096, 0x1000) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:depmod_exec_t:s0\x00', 0x23, 0x1) [ 980.849017] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.849083] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.858050] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7fffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000100)=""/139) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x1ff, 0x2e29}) [ 980.861623] binder: 15516:15522 transaction failed 29201/-28, size 0-0 line 3255 [ 980.870511] binder: 15516:15522 transaction failed 29201/-28, size 0-0 line 3255 [ 980.875550] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.875683] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.940300] binder: 15526:15534 transaction failed 29201/-22, size 0-0 line 3255 [ 980.955001] binder: 15532:15536 got transaction to context manager from process owning it [ 980.955024] binder: 15532:15536 transaction failed 29201/-22, size 0-0 line 3109 [ 980.957556] binder: BINDER_SET_CONTEXT_MGR already set [ 980.957565] binder: 15532:15536 ioctl 40046207 0 returned -16 [ 980.970470] binder_alloc: 15532: binder_alloc_buf, no vma [ 980.970495] binder: 15532:15540 transaction failed 29189/-3, size 0-0 line 3255 [ 980.970921] binder: undelivered TRANSACTION_ERROR: 29189 [ 980.970947] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.985594] audit: type=1400 audit(1553625210.112:85): avc: denied { create } for pid=15535 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 980.990405] binder: 15526:15543 transaction failed 29201/-22, size 0-0 line 3255 [ 980.991520] binder: undelivered TRANSACTION_ERROR: 29201 [ 980.991567] binder: undelivered TRANSACTION_ERROR: 29201 [ 981.075637] binder: 15548:15551 ioctl c0306201 20000000 returned -14 [ 981.088492] binder: 15556:15561 got transaction to invalid handle [ 981.088503] binder: 15556:15561 transaction failed 29201/-22, size 0-0 line 3118 [ 981.088891] binder: undelivered TRANSACTION_ERROR: 29201 18:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=0xc0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}, @request_death={0x400c630e, 0x1, 0x2}, @dead_binder_done, @enter_looper], 0x69, 0x0, &(0x7f0000000040)="30529d01459f309542a8a18c1f1d3ccbb3b97312a4bf8b995ad2352c24d7f48ff8334286860014c90005dc3ddcd2c2b01450c4e69e3ae8b541b829c1e9b5e0c39d6b48c756c74eccadf4080747a3b6c48d3dcb054ebe44524f1d730625157bc9a13ff2d3ed22d1e90e"}) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x541200, 0x0) openat$cgroup_int(r1, &(0x7f0000000300)='memory.max\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x306}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) prctl$PR_SET_FPEMU(0xa, 0x1) 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x400000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x322, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:30 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x28000, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) poll(&(0x7f0000000100)=[{r0, 0x44}, {r1, 0x220}], 0x2, 0x9b) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 981.094899] binder: 15548:15563 ioctl c0306201 20000000 returned -14 [ 981.259491] binder: 15511:15517 transaction failed 29189/-22, size 0-0 line 3118 [ 981.259578] binder: undelivered TRANSACTION_ERROR: 29189 [ 981.272688] binder: undelivered TRANSACTION_ERROR: 29189 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffff72, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0xfffffd90, 0x0, 0x0}) [ 981.299172] binder: 15573:15576 transaction failed 29189/-22, size 0-0 line 3118 [ 981.309483] binder: 15575:15578 transaction failed 29201/-22, size 0-0 line 3255 [ 981.309879] binder: undelivered TRANSACTION_ERROR: 29201 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="119ea38423e4868ed5416f72a463484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000abfc000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11630840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 981.346909] binder: undelivered TRANSACTION_ERROR: 29189 [ 981.352837] binder: 15577:15582 transaction failed 29201/-28, size 0-0 line 3255 18:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x40200, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @initdev, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0xb}, @multicast2, r2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xff, 0x890000000000}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e802033225f24b422a361bb7cfe40395077b76ba627ca76bc81989f1daa8df5b2798e4f78b028eafe0a3bf44f71cddec0d9aa4523d606c67b634936705b67d3bb7d770070c359ad644137ee3414358de0000000000"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 981.363317] binder: 15577:15582 transaction failed 29201/-28, size 0-0 line 3255 [ 981.374110] binder: 15577:15588 Release 1 refcount change on invalid ref 3 ret -22 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x200000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x3bf, 0x0, 0x0}) [ 981.374127] binder: 15577:15588 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 18:33:30 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x18, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf9c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x53, 0x10001, 0x8, 0x7fff}, 'syz1\x00', 0x4e}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x100, 0xffffffff, 0x6, 0x8, r0, 0xfffffffffffffffe}, 0x2c) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x803) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffffeac0f97f685e0eeca03dfde01fa441f25a7bea22b18faa37f82787643f4e510ce7f2f6b569439e02bd9d084efd093298231dea39348a5e83ff61c60ae3e116e06794a2b478aef26fa4a45a3653daa84f08f505b2de027fa2ec91cad8934b346b2c2f0cbc6e71036cd8cdc9ca1f6f4035ed9e9e404b99aad7e56b"], 0x0, 0x0, 0x0}) [ 981.374141] binder: 15577:15588 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 981.379419] binder: 15585:15590 ioctl c0306201 20000440 returned -14 18:33:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/218) inotify_init1(0x80000) r2 = gettid() perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x8e00000000000000, 0x41a6eae, 0x3, 0xb97, 0x0, 0x7fff, 0x40000, 0x9, 0x6, 0x0, 0x3, 0x2, 0x9, 0x3, 0x8001, 0x400, 0x2, 0x1f, 0x8, 0x3f, 0xf5, 0x10000, 0x4, 0xffffffff, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x3ef1, 0x1, 0x4, 0x8001, 0x1, 0x40, 0x0, 0x3ff, 0x0, 0x40, 0x1, @perf_config_ext={0x3}, 0x2950, 0x10000000000000, 0x1400, 0x9, 0x46, 0x80000000, 0x5}, r2, 0x1, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x176, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11630600000000000000ffffff7f000000000000000000000100000000aea3fc3ad1f82498001d0000000000000088d364fb00000000000045000e00000000000000000002000000000000005621b7aecc16219960d7f531c44fce8ce88624ca0c17bfe0e8358fc3425ff1f153a103bdff2ad145d3b4747225227ff89b9cd9fb38ab1739e5f5b51b7e68b95d46de2497c3b9b54becf9efe55a9846e8295bfeb64e79c3222505d1e718fe91a8968351ada27ecf99dcbe0b9cc6632dbf584111152a2b25917256d9327cc299d166df6088edabc6ee18977d0c3f7d101368314b6af0cda9ef25926fd60f6aac"], 0x0, 0x0, 0x0}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RLOPEN(r3, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x2, 0x4, 0x1}, 0x10000}}, 0x18) [ 981.450524] binder: 15595:15598 unknown command 1074291473 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634806000000000000000000000000000000000000000001883610e065165d7346d3dd9f63b5b423b17abbcf1c8e89e8321a"], 0x0, 0x0, 0x0}) 18:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5af91ad1c35468dc, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @release={0x40046306, 0x3}, @dead_binder_done, @release={0x40046306, 0x4}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x0, 0x3}, @transaction_sg={0x40486311, {{0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x0, 0x4, 0x32}], &(0x7f0000000140)=[0x38, 0x48, 0x20, 0x0]}, 0xffff}}, @reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@fda={0x66646185, 0x6, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f00000001c0)=[0x38, 0x48, 0x38, 0x38, 0x28, 0x48, 0x78, 0x38]}}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ptr={0x70742a85, 0x0, &(0x7f0000000200), 0x0, 0x0, 0xb}], &(0x7f0000000280)=[0x60]}, 0x9}}], 0x3d0, 0x0, 0x0}) 18:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e24, @empty}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) listen(r1, 0x0) r3 = accept$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0xffffffffffffffe0, 0x4) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x110) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000200)=0x15, 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) [ 981.450533] binder: 15595:15598 ioctl c0306201 20000440 returned -22 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348fe41949d400a0000004000000001000000"], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x89) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) 18:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1d8720b6788d6aad, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x34) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa4, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x1, 0x3}, @increfs_done={0x40106308, r1, 0x2}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, r2, 0x1}, @free_buffer={0x40086303, r3}, @transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x60, 0x28, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x3, 0x3c}, @fda={0x66646185, 0x0, 0x1, 0x3f}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000080)=[0x38, 0x78, 0x68, 0x0, 0x38]}}, @increfs_done={0x40106308, r4}], 0x20, 0x0, &(0x7f0000000280)="c03abe10771def593b18624d96f431a13a4c8ef27e2c95992311caa947d2bdd3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x396, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffb, 0x800) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000040)='/dev/binder#\x00', 0xd, 0x2) io_setup(0x3f, &(0x7f0000000200)=0x0) io_getevents(r1, 0x6, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000002c0)={0x0, 0x989680}) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000100cda200000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000"], 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) [ 981.462296] binder: 15596:15599 transaction failed 29201/-22, size 0-0 line 3255 [ 981.463006] binder: 15596:15599 transaction failed 29201/-22, size 0-0 line 3255 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "4309881b86b8ecd8"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x400, 0x1000, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000000002004e230000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e24ac1414aa000000000000f2ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) [ 981.512003] binder: 15601:15611 transaction failed 29201/-28, size 0-0 line 3255 18:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchdir(r0) r1 = getpgid(0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x100) mlockall(0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1000004400, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x80040, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xa6, 0x29, 0x1, {0x707, [{{0x6, 0x3, 0x7}, 0x200, 0x0, 0x7, './file1'}, {{0xdf4a8bf01ca4ca4f, 0x4, 0x5}, 0x2, 0x1d561f37, 0x7, './file0'}, {{0x44, 0x1, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x98, 0x0, 0x6}, 0x8, 0x44, 0x7, './file0'}, {{0x4, 0x2}, 0x40, 0xffff, 0x7, './file0'}]}}, 0xa6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x64, &(0x7f0000000040)={&(0x7f0000000300)=""/59, 0x3b, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6e6264788d"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x1000, 0x0) 18:33:30 executing program 3: socketpair(0xa, 0x0, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11630840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) getrusage(0x0, &(0x7f0000000140)) 18:33:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000008000000000e8"], 0x0, 0x0, 0x0}) 18:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000083de4139b653092000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl(r0, 0x9, &(0x7f0000000080)="14f62d658ff49f80750a12ad748bc1fdfc5f041bd934a8d544981c2ccacfb089209e4f325df23f009f1697a26003ab627970def65247ba91a6c4a70c2a4022e50029cf39a4247ad29f04c174b61142928bc68209e70d155c18470a1d32066c9366939bcf1ab3a07ba0763937ae3541538ef26955a9f13a") [ 981.516393] binder: 15609:15614 transaction failed 29189/-22, size 0-0 line 3118 [ 981.520908] binder: 15609:15618 transaction failed 29189/-22, size 0-0 line 3118 18:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect(r0, &(0x7f0000000100)=@in={0x2, 0x4e20, @broadcast}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='\x00', 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000000000000000000500000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:31 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:33:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x4, 0x5, 0x2, 0x4, "e070e99a1f1aab8b4694df1ecde680540b1386a28b36bfad586b150e3570f6df"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffc, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'syzkaller0\x00', 0x5}) 18:33:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) [ 981.534229] binder: 15601:15611 transaction failed 29201/-28, size 0-0 line 3255 [ 981.536319] binder: 15615:15619 transaction failed 29189/-22, size 0-0 line 3118 18:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x100) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) [ 981.586431] binder: 15623:15628 transaction failed 29201/-22, size 0-0 line 3255 [ 981.628479] binder: 15630:15637 unknown command 105407249 [ 981.628495] binder: 15630:15637 ioctl c0306201 20000440 returned -22 [ 981.629976] binder: 15634:15639 Acquire 1 refcount change on invalid ref 1 ret -22 [ 981.629986] binder: 15634:15639 Release 1 refcount change on invalid ref 3 ret -22 [ 981.629994] binder: 15634:15639 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 981.630004] binder: 15634:15639 Release 1 refcount change on invalid ref 4 ret -22 [ 981.630014] binder: 15634:15639 Acquire 1 refcount change on invalid ref 1 ret -22 [ 981.630023] binder: 15634:15639 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 981.630032] binder: 15634:15639 got transaction to invalid handle [ 981.630041] binder: 15634:15639 transaction failed 29201/-22, size 0-0 line 3118 [ 981.630064] binder: 15634:15639 ioctl c0306201 20000440 returned -14 [ 981.631697] binder: 15635:15640 transaction failed 29201/-22, size 0-0 line 3255 [ 981.633350] binder: 15634:15639 Acquire 1 refcount change on invalid ref 1 ret -22 [ 981.633361] binder: 15634:15639 Release 1 refcount change on invalid ref 3 ret -22 [ 981.633369] binder: 15634:15639 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 981.633379] binder: 15634:15639 Release 1 refcount change on invalid ref 4 ret -22 [ 981.633389] binder: 15634:15639 Acquire 1 refcount change on invalid ref 1 ret -22 [ 981.633398] binder: 15634:15639 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 981.633407] binder: 15634:15639 got transaction to invalid handle [ 981.633415] binder: 15634:15639 transaction failed 29201/-22, size 0-0 line 3118 [ 981.633433] binder: 15634:15639 ioctl c0306201 20000440 returned -14 [ 981.703703] binder: 15645:15650 transaction failed 29189/-22, size 0-0 line 3118 [ 981.727471] binder: 15645:15650 transaction failed 29189/-22, size 0-0 line 3118 [ 981.729943] binder: 15653:15657 unknown command -28810479 [ 981.729952] binder: 15653:15657 ioctl c0306201 20000440 returned -22 [ 981.733416] binder: 15653:15657 unknown command -28810479 [ 981.733424] binder: 15653:15657 ioctl c0306201 20000440 returned -22 [ 981.742996] binder: 15652:15659 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 981.743010] binder: 15652:15659 BC_INCREFS_DONE u0000000000000000 no match [ 981.743021] binder: 15652:15659 Release 1 refcount change on invalid ref 1 ret -22 [ 981.743030] binder: 15652:15659 BC_INCREFS_DONE u0000000000000000 no match [ 981.743041] binder: 15652:15659 BC_FREE_BUFFER u0000000000000000 no match [ 981.743050] binder: 15652:15659 got transaction to invalid handle [ 981.743061] binder: 15652:15659 transaction failed 29201/-22, size 96-40 line 3118 [ 981.748051] binder: 15652:15664 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 981.748074] binder: 15652:15664 BC_INCREFS_DONE u0000000000000000 no match [ 981.748087] binder: 15652:15664 Release 1 refcount change on invalid ref 1 ret -22 [ 981.748097] binder: 15652:15664 BC_INCREFS_DONE u0000000000000000 no match [ 981.748109] binder: 15652:15664 BC_FREE_BUFFER u0000000000000000 no match [ 981.749311] binder: 15652:15664 got transaction to invalid handle [ 981.749323] binder: 15652:15664 transaction failed 29201/-22, size 96-40 line 3118 [ 981.751538] binder: 15652:15666 transaction failed 29201/-28, size 0-0 line 3255 [ 981.825651] binder: 15673:15677 transaction failed 29201/-22, size 0-0 line 3255 [ 981.840393] binder: 15673:15682 transaction failed 29201/-22, size 0-0 line 3255 [ 981.844767] binder: 15678:15683 unknown command 1074291473 [ 981.844776] binder: 15678:15683 ioctl c0306201 20000440 returned -22 [ 981.868465] binder: 15678:15683 unknown command 1074291473 [ 981.868477] binder: 15678:15683 ioctl c0306201 20000440 returned -22 [ 981.895482] binder: 15674:15694 transaction failed 29201/-28, size 0-0 line 3255 [ 981.901449] binder: 15689:15696 transaction failed 29201/-28, size 360287970189639680-0 line 3255 [ 981.927806] binder: 15689:15699 transaction failed 29201/-28, size 360287970189639680-0 line 3255 [ 982.322457] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.327982] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.333654] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.339169] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.344779] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.350261] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.355816] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.361428] binder: undelivered TRANSACTION_ERROR: 29189 [ 982.366961] binder: undelivered TRANSACTION_ERROR: 29189 [ 982.372493] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.378001] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.383583] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.389137] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.394758] binder: undelivered TRANSACTION_ERROR: 29189 [ 982.400310] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.405845] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.411374] binder: undelivered TRANSACTION_ERROR: 29189 [ 982.416916] binder: undelivered TRANSACTION_ERROR: 29189 [ 982.422511] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.428000] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.433766] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.534026] binder: 15674:15694 transaction failed 29201/-28, size 0-0 line 3255 [ 982.542663] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.548171] binder: undelivered TRANSACTION_ERROR: 29201 18:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000e66793"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r2}, @clear_death={0x400c630f, 0x2, 0x1}], 0x5d, 0x0, &(0x7f0000000140)="a45f927efe3a0ecc36daeb36c9c03cd762005e1d57a491ae1784e2beb6a71ad909da0a17633a9c4832a842d9d35581c112beff0a45418c860b2f72a8f9cb61a5358afc38b34f8c55ad7447739118a2b7363f02a34574d13ef5024feb76"}) 18:33:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x2b, 0x1, 0x70bd27, 0xfffffffffffffffe, {0x14}, [@generic="faf76ac0cc507dca22e02faec6a605c52f666ec304330d43bd5dd2e44ceec470fe50632fe6e8cb4438cbee5ab87fd918adb03643bf87a1f394f1466ca680decc0cbde04f3e3b6d6c41773b49e633eca662ae9c38c0d349a62c00720d5bf5b6", @nested={0x4, 0x21}, @typed={0x8, 0x37, @fd=r0}, @generic="2e64acb4dfc67a16de708d28527af7a18730c2f1b8250a5056221d98774da048"]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x50) 18:33:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x480c0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x2c, 0x31, 0x8, 0x8, 0xb, 0x8e, 0x2, 0xf7, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x1, {0x7}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000140)=""/170) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r3}) ioctl$TIOCSBRK(r0, 0x5427) 18:33:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x200, {0x24, 0x1}, 0x4, r2, r3, 0x0, 0x101, 0x3, 0x3, 0x8, 0x1, 0xffffffffffffffc0, 0x100000000, 0x3, 0x5, 0x9, 0x7, 0x5ad, 0x1}}, 0xa0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2d59d921996f655f}) listen(r1, 0x0) r3 = geteuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xc) writev(r4, &(0x7f00000000c0), 0x0) 18:33:31 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000740)={r1, 0x1, 0x6}, 0x10) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x40110, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x80800, 0x7) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x118, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="00000000000000000663044004000000dd00000000000000480000000000000008000000000000000200000075000000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0100000000000000000000000000000030000000000000008561646600000000050000000000000004000000000000002f00000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="046304400200000011634840010000000000000002000000000000000000000010000000000000000000000018000000000000003000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0800000000000000076304400100000011634840010000000000000001000000000000000000000000000000000000000000000018000000000000004000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a6a7700010000", @ANYRES64=r4, @ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="30000000000000007800000000000000180000000000000020000000000000003800000000000000000000000000000078000000000000000000000000000000"], @ANYBLOB="05000000000000000f630c40020000000200000000000000"], 0x0, 0x0, &(0x7f0000000340)}) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{r5, 0x8}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000140)="0adc1f123c12a41d88b8702ad51a19a6f9aead51db6a66e39112b8e85cb521df18b04c89121f89044081178a8dcc75c3ac86db10eb3b74e9aeee69f897c1661b61525d9cd54c7281757a3e04e13b4593ff83691d3deed1e876cf247371b84e60546e13178e6bfaba93608892e219a31b6015e6e01cb73b40435de21674d6e56a6abd5f586e0d0a353e0457926bf540657f15397a239ca60993d65ff88ca37280a736424df679e2ebf0bfae77f50f921bc21c0ad277e69548c360c6e1a5532940cb9cf1e720") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, &(0x7f0000000000)=0x35, r0, &(0x7f0000000080), 0x1f, 0x4) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000400000004f8ffff6697000000000000000000000000e81ca3f4a37beb858760b867d35e07aa00"], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r3) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) 18:33:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/173) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffffacafc4e0b74ce3719a0a1faee199100f2ad802f0b2d28f9255fd7695a56b91e617a2985e5540e59777838621214196efd82839436107325cf5ff6f34c2fbb8dd7adb73f7630caa49a0e4309fa6a159a7e68a54dec2b2707f9bea3c04303f576dabeb807acfb3a4aeb87d9cf5d4da018aab8a4e217d53c268071b5039746b4f3a128528cf843022b4ebe797"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x100) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) 18:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x10010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 982.690038] binder: 15711:15715 transaction failed 29201/-28, size 0-0 line 3255 [ 982.722108] binder: 15712:15725 transaction failed 29201/-22, size 0-0 line 3255 18:33:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x6, {0x800, 0x9, 0x6, 0xffffffff, 0x0, 0x24e}}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0xfffffffffffffee3) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xa0, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x48, 0x48, &(0x7f0000000240)=[@ptr={0x70742a85, 0x0, &(0x7f0000000200), 0x1, 0x3, 0x2a}, @fda={0x66646185, 0x6, 0x1, 0x3e}], &(0x7f00000002c0)=[0x18, 0x38, 0x28, 0x48, 0x28, 0x48, 0x30, 0x38, 0x40]}}, @dead_binder_done, @register_looper, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r5}, @free_buffer={0x40086303, r5}, @exit_looper], 0x0, 0x0, 0x0}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)=""/160, &(0x7f00000000c0)=0xa0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000440)={'bridge_slave_1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 18:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) listen(r1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x1b0, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8172, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24}}}}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x618}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x38b, @ipv4={[], [], @remote}, 0x18c}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x81}, 0x800) [ 982.727449] binder: 15712:15728 transaction failed 29201/-22, size 0-0 line 3255 18:33:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) [ 982.727877] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.727905] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.733383] binder_alloc: 6724: binder_alloc_buf size 4294967296 failed, no address space [ 982.733393] binder_alloc: allocated: 9376 (num: 494 largest: 32), free: 2912 (num: 1 largest: 2912) [ 982.733417] binder: 15724:15730 transaction failed 29201/-28, size 0-0 line 3255 [ 982.735951] binder_alloc: 6724: binder_alloc_buf size 4294967296 failed, no address space [ 982.735960] binder_alloc: allocated: 9376 (num: 494 largest: 32), free: 2912 (num: 1 largest: 2912) [ 982.735982] binder: 15724:15730 transaction failed 29201/-28, size 0-0 line 3255 [ 982.736547] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.748130] binder: 15711:15732 ioctl 5427 0 returned -22 [ 982.757059] binder: 15733:15736 transaction failed 29201/-22, size 0-0 line 3255 [ 982.758048] binder: 15733:15736 transaction failed 29201/-22, size 0-0 line 3255 [ 982.758401] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.758430] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.842873] binder: 15741:15747 transaction failed 29201/-28, size 0-0 line 3255 [ 982.846999] binder: 15741:15752 transaction failed 29201/-28, size 0-0 line 3255 [ 982.847381] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.847412] binder: undelivered TRANSACTION_ERROR: 29201 [ 982.896939] binder: 15744:15758 Release 1 refcount change on invalid ref 2 ret -22 [ 982.896948] binder: 15744:15758 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 982.896957] binder: 15744:15758 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 982.896966] binder: 15744:15758 got transaction to invalid handle [ 982.896976] binder: 15744:15758 transaction failed 29201/-22, size 72-72 line 3118 [ 982.913129] selinux_nlmsg_perm: 5 callbacks suppressed [ 982.913139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=15753 comm=syz-executor.2 [ 983.064782] binder: 15711:15715 transaction failed 29201/-28, size 0-0 line 3255 [ 983.064864] binder: 15711:15761 ioctl 5427 0 returned -22 18:33:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400008000000d1180000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:32 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) listen(r0, 0xffffffff) [ 983.065185] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.085211] binder: undelivered TRANSACTION_ERROR: 29201 18:33:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000140)=[0x1000, 0xfffffffffffffeff]) ppoll(&(0x7f0000000000)=[{r0, 0x1483}, {r0, 0x30}, {r0, 0x20}, {r0, 0x920a}, {r0, 0x8000}, {r0, 0x8000}], 0x6, &(0x7f0000000080)={r1, r2+30000000}, &(0x7f00000000c0)={0x7}, 0x8) 18:33:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x280001, 0x110) 18:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3f) socket$netlink(0x10, 0x3, 0x8000000004) 18:33:32 executing program 5: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) signalfd(r0, &(0x7f0000000080)={0x5}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 983.145725] binder: 15764:15768 got transaction to invalid handle [ 983.155634] binder: 15767:15771 transaction failed 29201/-28, size 0-0 line 3255 [ 983.159002] binder: 15764:15768 transaction failed 29201/-22, size 0-0 line 3118 [ 983.162920] binder: BINDER_SET_CONTEXT_MGR already set [ 983.162930] binder: 15764:15768 ioctl 40046207 0 returned -16 [ 983.170110] binder: 15764:15776 got transaction to invalid handle [ 983.170120] binder: 15764:15776 transaction failed 29201/-22, size 0-0 line 3118 [ 983.170467] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.170494] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.208313] binder: BINDER_SET_CONTEXT_MGR already set [ 983.208326] binder: 15767:15781 ioctl 40046207 0 returned -16 [ 983.253969] binder: release 15783:15786 transaction 1402 out, still active [ 983.253974] binder: undelivered TRANSACTION_COMPLETE [ 983.302673] binder: BINDER_SET_CONTEXT_MGR already set [ 983.308175] binder: 15767:15781 ioctl 40046207 0 returned -16 [ 983.308347] binder: 15767:15771 transaction failed 29201/-28, size 0-0 line 3255 [ 983.323421] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.328961] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.621343] binder: 15744:15790 Release 1 refcount change on invalid ref 2 ret -22 [ 983.629186] binder: 15744:15790 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 983.636211] binder: 15744:15790 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 983.643230] binder: 15744:15790 got transaction to invalid handle [ 983.649457] binder: 15744:15790 transaction failed 29201/-22, size 72-72 line 3118 [ 983.692603] binder: undelivered TRANSACTION_ERROR: 29201 18:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffff44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000004000000000000000000100000000000000000000000000000000000000000000000000000000000000000e00000000000000000000fbffffffffffffffd546893248068b09eff585e65c1405cb410ec423779a1d7c18c14017a568826337912cd1bd3ac9133bee4df1ca"], 0x0, 0x0, 0x0}) 18:33:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3f9, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) times(&(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)) r2 = dup3(r0, r0, 0x7fffd) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x4, 0x6, 0x9, 0x8000, 0x5}) 18:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0xffffffff7fffffff, 0xc6, 0x4, 0x3, 0x0, 0x3f, 0x0, 0x2, 0x3f, 0x3, 0x1f, 0xffffffff80000000, 0xa599, 0x6, 0xff, 0x7, 0x401, 0x1ff, 0x2, 0x2, 0x8000, 0xff, 0x2, 0x7, 0x7, 0x5, 0x3f, 0xffffffff, 0x80, 0x2, 0xdb7d, 0xfffffffffffffffc, 0x5, 0x3f, 0x1, 0x2, 0x0, 0xc7, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x21200, 0x1, 0x9c, 0xf, 0x1, 0xe640, 0xfaf1}, r3, 0x5, 0xffffffffffffffff, 0xb) r4 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x6) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, [], 0x11}, 0xf5}, {0xa, 0x4e22, 0x3, @rand_addr="c804bf099a2e02098ed1f29cbbe1d40e", 0x9}, 0x8, [0x401, 0x100000001, 0x62cf, 0x5, 0x600, 0x3, 0x10001, 0x2]}, 0x5c) 18:33:32 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x102, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x1, 0xfffffffffffff800, 0xffff, 0xac53}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000002083d2ccd9905954076881"], 0x0, 0x0, 0x0}) 18:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 983.732844] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.760639] binder: 15795:15797 transaction failed 29189/-22, size 0-0 line 3118 [ 983.769713] binder: undelivered TRANSACTION_ERROR: 29189 18:33:32 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)="7a67d67331d7155b0ef08cf6cb5e6f9346f0df0755922f2a0da7b682a35436a6b8", 0x21, r0}, 0x68) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x880) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xbe, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r2 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000180)={'veth0_to_bond\x00', {0x2, 0x4e23, @local}}) [ 983.797846] binder: 15799:15803 transaction failed 29201/-22, size 0-0 line 3255 [ 983.811631] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.838014] binder: 15807:15809 transaction failed 29201/-28, size 0-0 line 3255 [ 983.846630] binder: 15808:15810 transaction failed 29201/-28, size 0-0 line 3255 [ 983.849959] binder: 15808:15812 transaction failed 29201/-28, size 0-0 line 3255 [ 983.850312] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.850339] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.883336] binder: 15807:15809 transaction failed 29201/-28, size 0-0 line 3255 [ 983.883499] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.896854] binder: undelivered TRANSACTION_ERROR: 29201 18:33:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x6, 0x4, 0x5}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:33 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0xfffffffffffffffd, 0x3, 0x800, 0x2, 0x3ff}}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400c00) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) bind(r1, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, [], 0x2a}, 0x6}}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000440)) fadvise64(r3, 0x0, 0xffffffffffffffff, 0x6) ioctl(r3, 0x1, &(0x7f0000000400)="0adc1f123c12a41d88b070") prctl$PR_GET_NAME(0x10, &(0x7f0000000480)=""/236) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x20) splice(r1, &(0x7f0000000040), r5, &(0x7f00000002c0), 0x3090, 0x4) recvfrom$unix(r6, &(0x7f0000000140)=""/195, 0xc3, 0x100, 0x0, 0x0) 18:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x614, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000230000000000000000000001000000000000000000000000040000000000000000000000000000b425be2f4387570000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00'}) 18:33:33 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x80000, 0x0) flistxattr(r0, &(0x7f0000000180)=""/152, 0x98) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x62, @multicast2, 0x4e20, 0x6f80000, 'lblc\x00', 0x20, 0x3, 0x5c}, {@remote, 0x4e20, 0x2001, 0x4, 0xeb0, 0x3}}, 0x44) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x5, 0x6, 0x5}, {{0x0, 0x2710}, 0x4, 0x0, 0x3f}, {{0x0, 0x2710}, 0x5, 0x1, 0x3}], 0x48) 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x120, 0x0, 0x0}) [ 984.023771] binder: 15821:15829 ioctl 5411 20000000 returned -22 18:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:33 executing program 5: munlockall() r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="112fefe8810000000001"], 0x0, 0x0, 0x0}) 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10111, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0xbc, "eda6434d9a63f10e8f85dfc3267d6d4727efcb39498d413190c454475bc112900faa835afc8ecd01186698b6d58d596042353d3f5d2852902c29b366988887733c55e6e5bd693805627bb55e54a8ce86d7638580ec2d7375ec63214d42ff05cec30a18d8c83e9f9b491f2f3ff0f0dc80d8065604f3be160a681f18291859f0ee5764e3e610dc2f636c560dff95fb95892a660e9b7e2bbcd909336f156932e9530bb9e90e6bb92716fb5c2554aa7e8a932f65c9acfa8d16c69fbcf1b6"}) 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'team0\x00', 0x2}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000050529b445b71000000000000007bfa3c2300000000b62632704803ed5def4c25e104f57cddbcde81e248e7b17f9597bf7e1489f6bcd5e49144da6570e49fb64b4ced0a8a0eebd6dd10200f1e65aa132414bb727017b24442c37a11dcce8255bf9fb540f22c"], 0x0, 0x0, 0x0}) [ 984.064191] binder: 15821:15829 transaction failed 29201/-22, size 0-0 line 3255 [ 984.064656] binder: 15822:15828 transaction failed 29201/-28, size 1024-0 line 3255 18:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000008000000000000000000000000000000020000100000046000000000000000000000000dee035dd38a12c959a00000000000000000000000000000000000000001733277830a2d28d0000000a1c1923c6a9ac830b6e355514a58ce79a6df8771b89747281f72770f4d7c4d2f271275c37820fbd5c8ec1f10af9559dd2ebe34c83e1586c5dce540f7dd9e79ebd29cbcb520f30cb27ff3646ca632bfa8d5586c7e05a1f41c56b7ac07ab0431bc37e053582ef3e217dd97b89335f218d"], 0x0, 0x0, 0x0}) [ 984.106618] binder: 15842:15844 unknown command -386978031 [ 984.106628] binder: 15842:15844 ioctl c0306201 20000440 returned -22 [ 984.108215] binder: 15842:15846 unknown command -386978031 [ 984.108223] binder: 15842:15846 ioctl c0306201 20000440 returned -22 [ 984.120607] binder: 15822:15847 transaction failed 29201/-28, size 1024-0 line 3255 [ 984.120944] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.120972] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.183457] binder: 15855:15858 got transaction to invalid handle [ 984.183469] binder: 15855:15858 transaction failed 29201/-22, size -4837573032935348916--7674219633097670178 line 3118 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xfe00, 0x0, 0x0}) 18:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) prctl$PR_GET_FP_MODE(0x2e) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/190, &(0x7f0000000140)=0xbe) 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 18:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x104) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000280)={@loopback, r2}, 0x14) 18:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000e0d92ef5000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000"], 0x0, 0x0, 0x0}) [ 984.186009] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.192398] binder: 15857:15860 unknown command 0 [ 984.192407] binder: 15857:15860 ioctl c0306201 20000000 returned -22 [ 984.268582] binder: 15821:15862 ioctl 5411 20000000 returned -22 [ 984.275151] binder: undelivered TRANSACTION_ERROR: 29201 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x40000, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0xfa9}}, {@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0x31}}, {@mode={'mode', 0x3d, 0x6d5}}, {@mode={'mode', 0x3d, 0x7}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 18:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000008000000000000000000002000000071d927a7"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02bf9f043718325b7810d7ec82be"], 0xe, 0x3) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x2) prctl$PR_MCE_KILL_GET(0x22) 18:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_pts(r3, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7a, r6}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="590000001400192340834b80050d8c560a067fbc00ff810500000000000058000b480400945f64009400050028925a010000000000000000001000010002081000418e00000004fcff1780359a7218c2bd3e7c68bc4a3d5ef7dd6ce799", 0x5d}], 0x1) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x401) 18:33:33 executing program 1: r0 = socket(0x0, 0x6, 0x3f) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x19}, 0x10000}, {0xa, 0x4e22, 0xdf7, @mcast1, 0x4}, 0xb00, [0xffffffff, 0xfffffffffffffff8, 0x4c, 0x4, 0xa1f8, 0x6, 0x5, 0x25f]}, 0x5c) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xc6, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$selinux_load(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814a59f5ad69449a2d80590fb83965bc4cf5232daa77a7affcd42ad6bc38e8cc4169902796098cf050676ff8373eb034957723bc8d15b9299583ebac9cfb07add15c68cefacd282837809cd9c2bd0caba38aa4aa030596f2bcf75b1420a21c945f0f3eece5e473f051262709b0845c2743e49a9ecc0182676f55f90ead425b6"], 0x98) [ 984.313542] binder: 15867:15869 transaction failed 29189/-22, size 0-0 line 3118 [ 984.324247] binder: 15866:15871 transaction failed 29201/-28, size 0-0 line 3255 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009be4ac00000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) ioctl(r0, 0x2, &(0x7f0000000480)="fad9e1a8f4e9a8fa8981093b7c2f1bae22844a878e7e9cbf0d8f95734d6b267994626622580508fc8a2d166eaf33e30307fe4f773a6660ae22db76041f9f61062cf1ee17933d635b2d50b1f58cc41ec5adab4e009d5a0c029d06fa708bdfa8518fc32189cca08fb94e6ee76255848f4e799157ddbb3c9ab1ad85e1f0a7b2174d2e3dc190b4bb787ba60aebf656cf778a443093e37ca0c3b63eb652091f7552bfb4438a7f3a2fe2d55b2e8b2aed7f645795516f0765365f0c5c7eaa87e633c237a55861bd381ad65a0ddbb66338d6472abd1131e2e82eb8abae7410bd9dc41e7f233548c9ca136da043516afa40bede67c3198c088e5b68aacab33cf716b882bc17a71984f84e6d7ee164ecc40c5133e8de32df4323a948fda35807e19f01b007dc95fa37ebb0cbdfbf135e587d6543eeb734fdaf428845f9ec66aeef750637d6c11e09b897528f790813cace69028571e25b555a6da03df957c2d9dc5b9b609df0698557340d6f7534865a062a74ee130bb7da1de6f1f53a38d90117c71e308adb8f58f799acf33e8478e5a08c95b4332ad80a078ae9fe78d84c6bfce098a81ac9758027a8220a055a9d3dec734237e04bb8a2f3755007db6a9b4815694fc8becdc18180c70f342a2454b24507df17eb250f35d6e2e064ef378829430ddebbca92d9d2740ba24c8c4a55400f1527ec12f10ee84024b68ea164731f967f42ba3e687a735feed71be9db8f25849abe7bf0ff7f4be4c6d517dc7857f77ebe9bac530a31952e38a9da4fc6390601c7d497a51e149bb85d30320ab9aaa998dde89b9079a85dc06217c59fd5a1472a31d3f68c5f19eda4bf7cab6cf191c9351c94777f4ac3044944169bc77a61fe560c764983223bf113d5d1cc7d04c9faa77150ed827571d93223eeee7f684e47b14aaa2238892b06925dfa5b161afa7d043fed9be02519f09e44ed452bc88a41f8c1ff5e55c617761e81b425a70c550dc8cc1b94c7a36c426f930409564952fd9d9af89e4150259e3dbd62c1e1b0054559f71e2c4529e79fe9925a5b0bfa237f7f128569fffb25bd4f14ce598a429c5f5f8468e7a0557b8e226f078ce9cff09d0d16e3995090d882d9954ee4786886160bb75cf52148603d83fe9d3025b82ebb305506c569653c147e5cf15589c3d7f7a3c5e653badb66dd66cbcbd0755b24a5ea57bc505fa905b0ec1ccac2905211985de2b4900e34789ee6f22dfb8dd1dd55d6874f7c56b2290728f38d143e2082429d57bc7e25181c73ddc4a1b08c906222780db53ea5b673201bba68e8dae6173ebcb88281e45792e49ee5ed736429e4c8e607c45f7e3c7a745e3e82e79ceea1669d93229d4fbf4b6faa2bf12a592e665b373dba2f9f7e7d8a2860883e422f4b69c5bccb837ad1a81d38eab0a1455995a6d1efab52571e33ee29d390d33457661f6018ba9f33747c4c65721ed3b3288089d2a2bc483259f76f037377e2f7841706065cdfa2671111584ae9ca7808cc1acb1eeace481a307e371f64638d68aee171c90e10d1574338b01f20a87e9fdf03e70dcbb1f845c8c3a6021d5a6c35e87bbb252c12fab9d91d649fc337b49d207796331c5da48f8d7f5c64bb0a0973e5c85c147133a38788485840d1cedcda7826830a71ef619c3ab4d5d10df6ab6a373afbff61a845b84d133483338007bd7c2d417090af0fe0fe4536a31b915a64f5f31ae57b7f44aa4241c4b875da4962fdecf77213dda5bf8bb15f457bf86f2e23290dcd882b3da51058b0ad174f08a79077fcb470de030ca5d83b7b3245c6bb40d799e6bf8a8c77700ed1331718bc9bbe995ee1607610654beb9ace1997c6e008354955ee3683ec9f9b6603087dcd2b4982b5a0fffa21f28db04e15acaaac280e1274c23c17137102d067c97abf6e878b2e60844e7710cc7d0088c4ed7933c03c3e636c75b3524dc156e6160aaa433b258688d209c6628a915bf6faeda8b01c2437834d90117fecf0cb035b01ec30c1a1a1f8b11a379d08c39cc6b4312657a0b26fca49f0c5a93c03181ba19cde6b068edc2453bbb207efbdfe00504ef5115acf148b232421bd43599c2b29d1161f2b424bc9a134f7d5f6d44969b746891869e440894f2e9102bddcff8e23e62c85009145a11b83c7d0f31831746b15ff29eebecf34b537f1c35b9e8a762068a5aaf0a009bea0ab1e08c9f2e46d10b5feb5aa3d2436f103fdc6d0b1ba95c5bf43f1f446636d87101dd6026929c4c78b47bffc77b248716b8274f29aaae839c64df005beb4e3636e8f6f32a5f0f93b5a4df3c5edab8e793feeaa8448ca65fae3c12d5b41c5110628bde6ab45305a598deca1c8532b8de4b1ab2d749ceaa6dfc566b07d37ef556e1cd82caf6b28eb67be8e54dea3136a06c2eb8fe04074bbe75dafc637a4997c96fbe80a7100a91a38fb081354814a015165b56be10c229dc388029332d26548a881c8b14bc3b501e734da8904f39e603bd5d87f5d3f2c893b8523649190684bfb3e902e3d71b1d09c199196bc3a8d4403c3c87f1e074cb4a7eb1dbda51cff40c46446d2c1a0d52d91b2c30a9fe3baee3920efc94b0bb69de2ebff60b396359649cfa8bd518110ff11be2e72141e5431f6b24dc3e75a1ad6db1694ee50737367b8506f8e1acad6261b7e8d0931dd589ba2eefb06df407723105316e9b15f4c8ceeef4f53f570e3987f92a9a135918b1bff3daca98547ab3362d65a18ea4b09cc8cdfd39dba24eb00528a718ebe8facb19286304a2e80d2f266262c16e00c0497b97ed2b80ce1c839a961907002750805f1494d36ccc8e6c024e33f4439da0a1c0b17c840fd3d021d8b6b381fb76956b3d8ba00b5a116c61103d3649c2ba5ec507a7273e043fa05e1bb62ddc316005ab23bc0e8cd31558d536c7b859824995fe000b5cbb73d1c089d029cfd788cbaa82264e6218a2b5eccfffea8d1ee4debad5c2331f6e69d94746de36b036945f42085c5dbd16599501034e63d432f0459c06fb4bd8241dc19cf85ecdb4083ac1fa7299eaa13ca2da441f68fc1297da93a9bf946c1f7c5f8c4ae87d90f09c126d6953e90ebb61f05b005a858c3839ee799ff122c1d13ae13af0b73bfa995578f9d937a370e54c538650d24c6a07b774d7372101f21f562ef1f790e4cb31af2048c9b7dd6a7285701d647c31c6a8eecb2c8870e2eaf2ff97bfc233f4d118408986567efceb6443cdce7e3e2e2f11cb557a6bfc4cfb0e7b020ca022dcf9228433f3e10f31266015421b7b5ed3e6b281468af7df0ad24cb5acddb70c54f758ed91a6f9bb046b621adc45fbacb2505302f4bf20251a32d976c4de15fb333d932d5e2eb4be832fbb05425ca1eb0f307cf95f9ae3f1bc456090fd74b21ac4e77d30069919ec3337d3da04929ce76700a98e69fab5f6c8de47cd56a03d2d3a952cbc9616429d419368b42d0af629172d870bc575b6cdf0d38a907a116af1767873598bc3ccaf5c47ae0fb092d86e78a5497e5ca03044bcba69d6e900f8c29a253aaac54a50e15fe1b28d5a366438a61639dcc515018896c26fb1ec7e46fc756c60bc37d3de4864bda59b54127308516a82a6f53a131f4cea154ff61c7e8366d5380db440358514bfffa1530f3bc6854fba8095043d5c971e51f0e35eaf05e4ecfdc2b8a70b56f3afb5a9722b49b94a98eb9c8b4248ba6c70ff61feac77d45375e25e798a1a5db0ba4e3398313f2628798765d7bce3cc65ba5dcf44e2babd912d1cbe69554607adcac233b64649f8d27d30ff899c9719f79fe357abd51c6d1136e8325a048cec453af6ea8343602d17b7a4018b40ec04c050f1d28d7451c45fc7642b6b078e132badf9e4258b14a9655aab63af27cac7fb346bcbc14d8b273c2cad74305722ca2f6df70ca13d2061beaccd153e6ef9e55d7f5e0219a51ee1c9a6a24c3a2e78fa875234600cecc8dc78ada64f35d7d4f10a45f896c654d9bf02eacffba0ce61b680223678d656febaed7e8cacd4eb71378734162ea35aa01081c6eeeac95ebc1ac719a3c20e57dae0dc9dcbb8ef3117fe31e6af4d69445f4e9a62d96512d1c135a5d0c4bd307ceaa5f3654137c8e5766758bf25403038541c2f5b0dcb69b8bc24f2d5df9fdab0418e9453be5339613450e9fa706f116d42aee03b6ad2a683579b8559babf9da771decd6439dce18a39972f1ea1cbb8a93ea36abad4f230400f7f348b66343f2f5f5104dcc0b3b64ef93a588c4ee768e795d990d29aa20cb9140dffcf0e705e5e24f237d5bb077ef64dfba8772b4dbcde6a5af6db59532b70fc3b78c6238b0d0fce261f50a277c1f0fc79ce11e2be7177ee4f44ec07221302772148a845a939aeb342544c691cabd1132e70fa092f79cf1988e0281941e725dcd12939c1705507834636cb93a40fdae742ed26cb80305544404d3d4a039cbd898cbbe781f36fec5cb0a91d09ceaf25f10e2fbb10cad9bef0517b2b62f5880e6a9b174860885f7bfee95be9db92cfa715433344c6b2fe89c6266b9216670a44b827f09fa3f29a5b169d37dbc7e614ef3db41c74cba96c057bc554afb2b366fbd7ea416d423a0cf7df671ce220bcaf241c6539824aab16e9ecf07e118b3a190c56a7051acff53db2d07856c1d2143e93d30bade326aa457acb46292008151bfbd29326af61be811d0b82029adce4941785cc9c7a98b0ff6ed42dfd837c0d7f40041827b7f6183986114399e04fa659edca7265b47416f6b4d5ef7ef1b09963deab328c67f6ba5c9a20c825ad3d47b0d11b3a50873bdb1573e95cece907ddd278c57ea51186d87d0921bcfdf38c8fdb61be83d2a47e4848399b5fab6918ba9d00ec81206623e711d869ddcff7d837e10945e1df3d7703d2ff9c80a04ac4a4f17bb1dc5ce716d50ad96a92b4374af5a82232fa1eafed1d46f9a9b1001140eac7d624e384d131fc1656bb6f2a95e78b98ed6320a976bd82626103feb22abd8a656b491f3b0922255b587871442c74b49b5d6d30a17589e1528051b0a3b19478a7963f586558a2b441b75988aa62fcf99f559301a1c86b2a57cfc0663ce79d1d249396ba47f2aec7d05ebfe8face47325c788a6ca466af5effdf6fa22624924c6f6debba416424c2752bb71dc52a092f9fb1ca53b9b7b5b398c6f517a38f0068c8ad1c93f0740248eae3a9f8ad9f50c9cecee2938087cff8406b48769905259f825292f73c185da7f70b7befac0485c48ba03f6d7b3985adb63b515a05e949bf6dcdda6f1ba0adcc1b6645c34c43fec47fd8ce9ef32877472a4f19b7d00e3ae7b321beeed190934cf993aa52de19efe010c8d4549ea5ac1bab16b8268a8d9b7f8a03888a7919ff0d0e614a5fd89dbd7d218abe8c5401bc20bf218ee4136a937f0943756dd04578144c792d998c7ba7b967e54a4bdd21021ec9bd8cbe386d2653f5674fe46ef40268122736dd585d944c314108c04c929dc5b1bd4f2dfa75f8503eb32f8f77746bed01c057b6740848d0d0326989ad680e7a4d3061e03ddd3f252b7254e0f31b6636d09448f7b2806394705e79a90e893501a7bf11a78c19acd019d2e71a5b8690097e61bee266e8ab7f7d5cc4f8bba03f446cccfafae15cadf99336e2bbc571e3e247e6f387074330fa9078f83ae6578bc34ff4b332bc4411c14d454763a079f0e4505c0c17bb5c8e164971b581935fe8eb7694f345bbe6c47cf10d4a04bac29cbde414f4882e52c57c78cfe557b7e02dc20c9ae1faaaad32aef8e3570b637ad6c6fa29c4431b6e603ba13c4d940dbd52bf0de62a2dbacd667f9f8cc8df2d0f2d28657") [ 984.326652] binder: 15866:15871 transaction failed 29201/-28, size 0-0 line 3255 [ 984.327146] binder: 15868:15872 transaction failed 29201/-22, size 0-0 line 3255 18:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x3c, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e20, 0x0, 'rr\x00', 0x2, 0x100000001, 0x70}, {@loopback, 0x4e24, 0x6, 0x7fffffff, 0x2, 0x9}}, 0x44) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) sendto$packet(r3, &(0x7f0000000080)="6eb7194d54f3912e4ce21ec219fb5221da1ec1af656d0b75901abf0662bb0d6b56d5818d51d215c51d4dd6250b46e36b42a1db3f575c8e83244f66e8be", 0x3d, 0x4, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:33 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000000c0)) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000340)=0x14) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in=@multicast1, 0x4e24, 0xffffffffffff8000, 0x4e22, 0x6, 0xa, 0x20, 0x80, 0x2c, r1, r2}, {0xfffffffffffffff8, 0x4, 0x0, 0xfffffffffffff801, 0x0, 0x7, 0x3, 0x5}, {0xbde, 0x1, 0x20, 0x7}, 0x2, 0x6e6bb5, 0x3, 0x1, 0x1, 0x2}, {{@in=@local, 0x4d6, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x3500, 0x3, 0x1, 0x2, 0x4, 0x9, 0xfffffffffffffff8}}, 0xe8) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1fffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff0000/0x10000)=nil, 0x10000}, &(0x7f0000000080)=0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x1c6, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00d419c8707dab853fc72c3abfcbaeb447eab9cbe82806078a4b122553f9b334c1104365c85b1d4589ea691053223090ea7c9e444d1289cd8072b5143f1adb64728ac704eb2e023f1071b3c76fe8091ade38f44d838cdb489e3fb5adfa87585e7dfd"], 0xfffffffffffffff9, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000240)={r5, 0x1, 0x6, @random="bb69371d5500"}, 0x10) [ 984.331275] binder: undelivered TRANSACTION_ERROR: 29201 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 18:33:33 executing program 5: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_smack_transmute(r0, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) eventfd2(0x322, 0x8000080800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000004322000004002d01000000000000000001"], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x202400, 0x0) prctl$PR_SET_FPEXC(0xc, 0x80000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000002c0)={0x200, 0x9, 0x6, 0x8, 0x7ff, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) [ 984.331306] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.337730] binder: 15868:15872 transaction failed 29201/-22, size 0-0 line 3255 [ 984.363422] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.363452] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.420340] binder: 15883:15889 got transaction to invalid handle [ 984.420352] binder: 15883:15889 transaction failed 29201/-22, size 0-0 line 3118 [ 984.425171] binder: 15883:15889 got transaction to invalid handle [ 984.425189] binder: 15883:15889 transaction failed 29201/-22, size 0-0 line 3118 [ 984.435754] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.453238] binder: 15881:15895 unknown command 1441817361 [ 984.453248] binder: 15881:15895 ioctl c0306201 20000440 returned -22 [ 984.472199] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.496652] binder: 15881:15895 unknown command 1441817361 [ 984.496666] binder: 15881:15895 ioctl c0306201 20000440 returned -22 [ 984.565757] binder: 15910:15913 transaction failed 29201/-28, size 0-0 line 3255 18:33:33 executing program 3: setresuid(0x0, 0xee01, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x13a4, 0x24, 0x304, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x1b4, 0x29, [@typed={0x8, 0x80, @ipv4=@multicast1}, @generic="8ceb3ceb2c135fcad1ba15df64db2d763e48983e43b549247d2d6a8bbe3a1fef038879d668c5809b54f89dff74b941894450b89e7ccf8d3994ff84a522be11e9c70665f7ff89fe0e4ad2c2906c379268afce6c115f0826d55369e8666060b72bea831b6366a3c858e644568a476a819725e5f73dd4586fa305bd05cc35e1be0973fbf2aa40c4067ac89eb918034ee7", @typed={0x4, 0x1f}, @typed={0x14, 0x66, @ipv6=@local}, @generic="3bb69aa58b75db1db9f7d6d7bd3a49e8f6f6ae593ac69f72d4", @typed={0xe8, 0x3f, @binary="4209ad6d4fe59bf0e831f8980b54fcc7376b08604859e4073824070f0971aa90463795dd1a124501ac1a2e0c66a3c81b6eac8a7036801ad6e94007f6253b82fe139823af231d27607b07e9fa3521dde616707296ccee46fd9632ffb790bcc1ef6cc55a491dedf9224cad7d4da0df476d1b83f08bff59619336ca7085ea0b771d8d2dd859a93fd4b54c830a1c7aae2c2dd3a2944e4648522ce5719ac081451dd93d44c5634186bcfcdf52c4692d028235a1df16a6096a68e65c5815dadaeb52ba1f65166dca5911fe1be84db9f7cee32afef96ce5c6e33a8eb7a845da67030c7770f3b0"}]}, @typed={0x8, 0x53, @ipv4=@remote}, @nested={0x1014, 0x84, [@typed={0x8, 0x52, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @generic="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", @typed={0x8, 0x75, @fd}]}, @nested={0x4, 0x64}, @generic="d7ed2201fb26c36e5899dc1d56845ace", @typed={0x8, 0x20, @fd}, @nested={0x190, 0x22, [@generic="d26719c7c6876a08c07f3023da6ea1d7a64189d22bb6dd027272fa2c8f6f93cf96134fdb8481065991f3f94a297fdab86e61ff2dc43af8d79ae8a4b4d9972b5313b2ff1f982375b997f16cb30568aa73d35c262930d7ad124f4ed46783e07f08ce8da6cdb173c97f8270189a4ddf4dcb29c2809265b6a59cd5bdef966b12c9081c05837dbc243eca09ba7837b21c8fa594e74513d4bb233ab7683471f28bfb68d1d61cd1e95f606ea0af86ebf638b3611f6692fa44", @generic="8f8da15297df28a1c4320ce49db80ea86fc490b4026d479fc4788cdb7d007de4c756197d8a57869be05bab3d613f26d11cd6238ec0b82b8ba4c0b561789c41facbbe5b001a045664a41fc64c9993399dd266b634d66664c99cc244faca16f8ae0ed4da28f6a93fa82525f4de7626baef9f83bd79c6adef98a68bfb6f05256a31bec8106f5c8a719f9bd5dc78f468b44a1a6e446b683540890e9bcea87fbb12e052f1023899547ca90490c1c8d3c336e45b209309aafdb244279a7a206afce381ba8a9c7ee65eaed23e591db8dd3c4470a76c8304"]}, @typed={0x14, 0x6d, @ipv6=@dev={0xfe, 0x80, [], 0x22}}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x10}, 0x81) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20200, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11633a400000000000000000e9ffed8843f6845b000000000000000000000100d91c0f0d052f56f83a4cfe00000000000000000000a4ebc9b630b82989e100000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 18:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:33 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10100, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x400, 0x2, 0x1, 0x33d, 0x11, 0x1, 0x1, 0x1a12, 0x80000001, 0x50b}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000d700000000000000000000000000000000000000000000000000000000f7ff00000000e8"], 0x0, 0x0, 0x0}) 18:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xfffffecd, 0x0, 0x0}) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x88, 0x0, 0x1}}, 0x14) [ 984.585237] binder: 15910:15914 transaction failed 29201/-28, size 0-0 line 3255 [ 984.589655] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.589684] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.672295] binder: 15867:15917 transaction failed 29189/-22, size 0-0 line 3118 [ 984.680972] binder: undelivered TRANSACTION_ERROR: 29189 [ 984.686638] binder: undelivered TRANSACTION_ERROR: 29189 18:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000480)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x2, 0x61e, 0xa8fe, 0xff, 0x3e}, 0x14) 18:33:33 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400, 0x0) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="bcd06618786e5134fafcd7ef601715666298f2c41b5e3b9d438385a53c0562a1a2cfb9", 0x23, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r1, 0x56f8, 0x7f}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000280)="043679af1521b68383202f519a1e20fb3f7aabaaf41b4c79ed7bbe19a406e1de6e76e170c1c3d17bc5d9b11ab0336287317a706484e867f632bed9f26ea18cf133d823d9c2b0dde8ed43333900ebe6841286abd0664244a44fe74b1732dee7e150f75db1163f2df9a5e2c6492566267f84ff5faecbc0e7ad9c35c71d6a4e6cc3232084197ef33658cadb71b653bce5851db9e92e9ab91ffcf28bc7668929f3921967b965343f27", &(0x7f0000000340)=""/135) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@mcast2, r2}, 0x14) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x3650239}, 0xc) [ 984.725774] binder: 15920:15922 transaction failed 29201/-22, size 0-0 line 3255 18:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:33 executing program 4: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) [ 984.751654] binder: 15924:15927 unknown command 3 [ 984.751663] binder: 15924:15927 ioctl c0306201 20000040 returned -22 [ 984.760054] binder: 15924:15927 unknown command 4 [ 984.760072] binder: 15924:15927 ioctl c0306201 20000040 returned -22 [ 984.785315] binder: 15933:15936 transaction failed 29201/-28, size 0-0 line 3255 [ 984.821141] binder: 15933:15936 transaction failed 29201/-28, size 0-0 line 3255 [ 984.852692] binder: 15951:15955 transaction failed 29201/-28, size 0-0 line 3255 [ 984.860929] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.860961] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.865114] binder: 15951:15955 transaction failed 29201/-28, size 0-0 line 3255 18:33:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="397788063b5033f53fdccca434afe397", 0xffffff6c) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) poll(&(0x7f0000000000)=[{r1, 0x114}, {r1, 0x400}, {r1}, {r1, 0x24}, {r1, 0x40}, {r1, 0x60}, {r1, 0x8000}], 0x7, 0x9) 18:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x395, 0x0, 0x0}) 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pipe(&(0x7f00000000c0)) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@local, @initdev}, &(0x7f0000000080)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000000c0), 0x9e, 0x0, 0x0}) 18:33:34 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$KDSETMODE(r0, 0x4b3a, 0x80000000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x800) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0}) 18:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 984.865230] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.865468] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.942363] binder: 15920:15922 transaction failed 29201/-22, size 0-0 line 3255 [ 984.942871] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.956004] binder: undelivered TRANSACTION_ERROR: 29201 18:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x3, 0x15, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbb, 0x2a, {0x6, 0x7f, 0x64, 0xadf, 0x0, 0xb8b1, 0x0, @in6=@loopback, @in=@multicast2}}, @sadb_lifetime={0x4, 0x0, 0x0, 0x5, 0x5f}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@multicast1, 0x9, 0x10, 0x4}]}, 0xa8}}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000d70b39000000000000d49442582ae70d10e5dc000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb80bd3fd8797d4d6, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x669fef1c9b509e93) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xa}}, 0x1c) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000240)=""/165) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffeb3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000040000000000000000000000e5ffffffffffffff000000e109bb9647bfcdb616a2f1c4ca00e89b05"], 0xffffffffffffffba, 0x0, 0x0}) [ 984.997282] binder: 15968:15972 transaction failed 29201/-22, size 0-0 line 3255 [ 984.999479] binder: 15964:15973 unknown command 0 18:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x8001, 0x2}, {0x1, 0x101}]}, 0x14, 0x0) 18:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1cc, 0x0, 0x0}) 18:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000034000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000008c744c750214e2a13100"], 0x0, 0x0, 0x0}) [ 984.999487] binder: 15964:15973 ioctl c0306201 20000040 returned -22 [ 985.018692] binder: 15966:15974 unknown command 808464432 [ 985.018702] binder: 15966:15974 ioctl c0306201 20000440 returned -22 [ 985.060185] binder: 15982:15985 got transaction to invalid handle [ 985.060196] binder: 15982:15985 transaction failed 29201/-22, size 256-0 line 3118 [ 985.060220] binder: 15982:15985 ioctl c0306201 20000440 returned -14 [ 985.063965] binder: 15982:15985 got transaction to invalid handle [ 985.063976] binder: 15982:15985 transaction failed 29201/-22, size 256-0 line 3118 [ 985.063996] binder: 15982:15985 ioctl c0306201 20000440 returned -14 [ 985.083236] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.083265] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.103653] binder: 15993:15996 transaction failed 29201/-28, size 0-0 line 3255 [ 985.108655] binder: 15993:15996 transaction failed 29201/-28, size 0-0 line 3255 [ 985.131360] binder: undelivered TRANSACTION_ERROR: 29201 18:33:34 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000140)=0x0) r2 = getegid() fchown(r0, r1, r2) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x145, 0x0, 0x0}) 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x80000000, 0x2, 0xfffffffffffffffa, 0x7, 0x0, 0x6, 0x1000, 0x8, 0x1, 0x9fea, 0x7fff, 0x80, 0x1f, 0x7, 0x10001, 0x6, 0x943, 0x3, 0x6, 0x7, 0x7, 0x80000001, 0x1, 0x32, 0x2, 0x51, 0x5, 0x3, 0x6, 0xfff, 0xbb95, 0x6, 0xfffffffffffff001, 0x5, 0x100, 0x2b06, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2000, 0xd8, 0x4, 0x0, 0x1, 0x7fffffff, 0x80000000000}, r3, 0x7, r2, 0x2) 18:33:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/206, 0xce}, {&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000000)=""/10, 0xa}], 0xa, 0x37) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34e, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r1, 0x80000) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffefd) ioctl$BLKRRPART(r2, 0x125f, 0x0) 18:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 18:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000a7d20000010000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$packet(0x11, 0xffffeffffffffffb, 0x300) getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)=""/47, &(0x7f0000000100)=0x2f) 18:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSBRK(0xffffffffffffff9c, 0x5427) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ftruncate(r0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/138) [ 985.131391] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.147503] binder: 16001:16003 transaction failed 29201/-28, size 0-0 line 3255 [ 985.147524] binder: 16001:16003 ioctl c0306201 20000440 returned -14 [ 985.147931] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.262604] binder: 15968:15986 transaction failed 29201/-22, size 0-0 line 3255 [ 985.272852] binder: undelivered TRANSACTION_ERROR: 29201 18:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000180)) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000), 0x9e, 0x1ff, 0x4}) r4 = dup(r1) ioctl$KDENABIO(r4, 0x4b36) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 985.305319] binder: 16009:16012 transaction failed 29201/-28, size 0-0 line 3255 [ 985.333747] binder: 16008:16015 got transaction to invalid handle [ 985.343371] binder: 16009:16012 transaction failed 29201/-28, size 0-0 line 3255 18:33:34 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x7fffd) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xf4, 0x5, {"6db0b7e403dd362452045981926be5080261cce5b72ac418617e02d38a03350ee123706ffdd848594012fdef0ef569da70e0c0f1961f536d42913641b0612b945d64d062f04d461ce32c843a167bc3b4568f3792ec1ca68800470be0a39c0a77f6532109226c96ca95c5f2fc43504288e2759c1809c0faa6b497b04776147cd4b89d2077832eaa4909242045968475287795014f361423b87adf5035714b23e3590fdc0d8cb727eac0bd3b10860ddaf3d1995c640d93887f6ec142e506e53bd36daf8c50c2d9ab35f564809f31c49e2f15e3ac39613c0f19006f8509"}}, {0x0, "ff53e1565b727e745dc98ff1dc7269a8ef2da0a4151d3d11fc28af678b7901498e38e6eaa15abd730481aadd2f386ff0a152afb1749f353bccaf1c61e00bfeedfa052106a85de1513780552a"}}, &(0x7f0000000200)=""/94, 0x142, 0x5e, 0x1}, 0x20) fsetxattr$security_smack_entry(r1, &(0x7f00000002c0)='security.SMACK64IPOUT\x00', &(0x7f0000000300)='}cgroupvmnet0nodev]^ppp1\x00', 0x19, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000001ae69625205a389337a682a4927f0004000000e8aedb1bed51c0d2"], 0x0, 0x0, 0x0}) 18:33:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) write(r0, &(0x7f0000000040)="24301148f84eeb1b81cf64f025bd39cabb1743ebdbd14eeef91d86f2755f0ab8492c33861248361b061633e67138e7312b7e4ea0052b2bc567b7080c6fdbebf8f2a584607b337f32d14f2ff3ea0ca7ab97af5562840382da9bb137c363081e2e81f565743c90b3bbad2585825c782d7b60c4802fa8bfaccc29613d42c791884bf29e3dc8e73560b3372078adbe00dbe19127d61e88083e8eb41e009c403b4dbcff1177b385d2cf376b4ca6", 0xab) r1 = socket(0x1f, 0x2, 0x3) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x8, @remote, 0x1}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x103000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000240)={0x2b, @loopback, 0x4e23, 0x3, 'ovf\x00', 0x14, 0x8000, 0x77}, 0x2c) 18:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 985.360258] binder: 16017:16022 transaction failed 29201/-22, size 0-0 line 3255 [ 985.360279] binder: 16017:16022 ioctl c0306201 20000440 returned -14 18:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 18:33:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40a000, 0x0) r2 = geteuid() fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r2, r4) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x4e23, 0xa1bb, 0x4e24, 0x400, 0xa, 0x80, 0x80, 0x32, 0x0, r3}, {0x0, 0x8, 0x8, 0x1, 0x7fff, 0x100000000, 0x2, 0x2}, {0x1ff, 0x5, 0x0, 0xe8}, 0xf75, 0x6e6bb3, 0x0, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d5, 0xff}, 0xa, @in=@local, 0x3505, 0x3, 0x2, 0xfff, 0x80000000, 0x2, 0x2}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff63c7051f84f044fa5f0300000000000000050000000000010000000000000000002000000000000000000000000000000000000000ae6d0124230000000000000000000000000000fbffff"], 0x0, 0x0, 0x0}) [ 985.360961] binder: 16008:16015 transaction failed 29201/-22, size 0-0 line 3118 [ 985.363864] binder: 16008:16015 got transaction to invalid handle 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340401b00000000000000000000000000000000000000040000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffdac, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffef4, 0x0, 0x0}) 18:33:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) readahead(r0, 0x800, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x281) [ 985.363873] binder: 16008:16015 transaction failed 29201/-22, size 0-0 line 3118 [ 985.367734] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.367817] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.367844] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.367886] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.375788] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.445069] binder: 16032:16034 transaction failed 29189/-22, size 0-0 line 3118 [ 985.445601] binder: undelivered TRANSACTION_ERROR: 29189 [ 985.497702] binder: 16043:16044 unknown command 96953343 [ 985.497712] binder: 16043:16044 ioctl c0306201 20000440 returned -22 [ 985.567106] binder: 16055:16059 transaction failed 29201/-22, size 0-0 line 3255 [ 985.567414] binder: 16055:16059 ioctl 40045565 281 returned -22 [ 985.567986] binder: 16055:16059 transaction failed 29201/-22, size 0-0 line 3255 [ 985.571160] binder: 16055:16060 ioctl 40045565 281 returned -22 18:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_SECCOMP(0x15) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f00000002c0)={0x11, 0x7, 0x1, {{0x4, 'ppp0'}, 0x1}}, 0x11) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x10000, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0214fe07090000002cbd7000fddbdf250400030007000000933f0000000000000001000000000000ff01000000f6a80002000b000200000001000000010000000100140004000000"], 0x48}}, 0x20000000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x80000000, 0x101, 0x3, 0x8, 0x2, [{0x81, 0xe, 0x4, 0x0, 0x0, 0x4}, {0x1f, 0xffffffffffff8001, 0x1ff, 0x0, 0x0, 0x8}]}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/create\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000008000000000000000000000000000000000000000000000000000000530200000000000000400000000000"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x5312cb73562521b7}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x210, 0x1a, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@nested={0xec, 0x7d, [@generic="d2eac1056dfd767130a67f5b982ed6bcc1c678f554f84c5221c1f33ae439e0ef925cdd4f8ac0652f0942a93469be8a160ea1099d4e557cc30d86fff9e3", @generic="8dbabffc94a88aba186f4268cfe6200367f4d2d444ff41c6c7b43d6dad06a546bab863807caa70f21df772db6d0bd621be01ba8d695b7dee6a4e7edfa9795c5093b549af60bd8a685bf20d8f74a29b380df651ce599980903301195d4b641b794b511f1500ccdacf621b85e793e4d36e6f1d9d23d149f036a271b0849fcb4a6bb230bbcbb09d7f3f5597f9ff1420d2", @generic="884fcbfbb1c53e3171bae07581d890305b6290f24064fa42c5b71c4c"]}, @typed={0x14, 0x83, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @generic="c2e02a06d80eef24a35539b68971c1a54a443ab8353570849e2b4e463941eb41695d680d5628679a6541bf5b0b97e191e042a54d9f4f0c26007f9a3454de0667e80c60a8bc234f004e9a20611603e16eeafacb9d3158c649a3520f394ce47757e56e561d22b58bf23e2c5da47e2c873495a0898b385d3834021307fee37ff705c39f70ac8bd1122ef7cd61543546a0dbb03b5fe7a3ad43026422c5659fc270f36587e8948258072fb6d17450666f2d8dc273d201323b0502bb0cd426b6adc21752eceb3f1c1dfd7ca085e93e2af50de3eaf78dead4a4d772c73bfde40412d73b689cda6480e44c1f23df32662642201e62ffe3", @typed={0x8, 0x48, @ipv4=@empty}]}, 0x210}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) write$P9_RFSYNC(r1, &(0x7f0000000500)={0x7, 0x33, 0x1}, 0x7) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 18:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x10000, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000040)="27f86a53e87d2603f5afc4db8b49e59dbf4c152202c586f7679b008cef489a7189d9224c29d6950fd7f492627808f6c569ecfa4e8b9a2f523e534f8d70110b4abd38c454ab4c07699b11e8df7358ee8550578dcd6d69e7509bc1658931abaaa9f386caa15bff866f5135501c3721b76adcf2ed69dae324ff924ca7e7baed7efbbe6550a2baf68cee0d6f9123dcfafc57d13a1dbac65e26f335a6a22d4b5fed56365ecfddb0581c6d9f87dad3970f24fc780204e213f8208ff4077192b8e8626ab4028faeb32ed0b5259a2664323c", 0xce) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000008040)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000007e40)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000001480)=""/186, 0xba}, {&(0x7f0000001540)=""/215, 0xd7}, {&(0x7f0000000080)=""/40, 0x28}], 0x7, &(0x7f00000016c0)=""/30, 0x1e}, 0x5}, {{&(0x7f0000001700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001780)=""/223, 0xdf}, {&(0x7f0000001880)=""/13, 0xd}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/130, 0x82}, {&(0x7f0000002980)=""/214, 0xd6}, {&(0x7f0000002a80)=""/28, 0x1c}, {&(0x7f0000002ac0)=""/168, 0xa8}], 0x7, &(0x7f0000002c00)=""/250, 0xfa}, 0x5}, {{&(0x7f0000002d00)=@sco, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d80)=""/68, 0x44}, {&(0x7f0000002e00)=""/123, 0x7b}], 0x2}, 0x3}, {{&(0x7f0000002ec0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004380)=[{&(0x7f0000002f40)=""/251, 0xfb}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/24, 0x18}, {&(0x7f0000004080)=""/254, 0xfe}, {&(0x7f0000004180)=""/95, 0x5f}, {&(0x7f0000004200)=""/150, 0x96}, {&(0x7f00000042c0)=""/99, 0x63}, {&(0x7f0000004340)=""/43, 0x2b}], 0x8, &(0x7f0000004400)=""/142, 0x8e}, 0x9}, {{&(0x7f00000044c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004540)=""/57, 0x39}], 0x1, &(0x7f00000045c0)=""/4096, 0x1000}, 0x8}, {{&(0x7f00000055c0)=@hci, 0x80, &(0x7f0000005680)=[{&(0x7f0000005640)=""/6, 0x6}], 0x1, &(0x7f00000056c0)=""/164, 0xa4}, 0xfffffffffffffff8}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/27, 0x1b}, {&(0x7f00000067c0)=""/188, 0xbc}, {&(0x7f0000006880)=""/137, 0x89}, {&(0x7f0000006940)=""/215, 0xd7}], 0x5, &(0x7f0000006ac0)=""/50, 0x32}, 0x4}, {{&(0x7f0000006b00)=@caif=@rfm, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006b80)=""/50, 0x32}, {&(0x7f0000006bc0)=""/90, 0x5a}, {&(0x7f0000006c40)=""/109, 0x6d}, {&(0x7f0000006cc0)=""/168, 0xa8}, {&(0x7f0000006d80)}], 0x5, &(0x7f0000006e40)=""/4096, 0x1000}, 0x3}], 0x8, 0x1, &(0x7f0000008080)={r1, r2+10000000}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000080c0)={@dev={0xfe, 0x80, [], 0x12}, 0x6d, r3}) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:34 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x8029}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x4, 0xfffffffffffff001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000015c3db7ea9d715461d76d72e6d03c98da4684ae2d549aae2032031322a177a6f8db29c0199eb631e47c5b"], 0x0, 0x0, 0x0}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/123) 18:33:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0xff, 0xe2, 0xfffffffffffffff9, 0x5, 0x0, 0x0, 0x20000, 0x4, 0x8, 0x2e6, 0x100, 0x3, 0x3f, 0x8, 0x1, 0x1ff, 0x4, 0x4, 0x101, 0xb7, 0xa00f, 0x5, 0x0, 0x0, 0x9, 0xa2e8, 0x200, 0x3, 0x0, 0x0, 0x5, 0x3, 0x1800000000000, 0x4ac, 0x101, 0x372, 0x0, 0x8001, 0x4, @perf_config_ext={0x7, 0x5}, 0x10200, 0x1, 0x0, 0x2, 0x3, 0x3f, 0x6}, r1, 0x7, r2, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) setrlimit(0x7, &(0x7f0000000180)={0x497, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @window={0x3, 0x81, 0xfffffffffffffffd}, @mss={0x2, 0xf244}, @sack_perm], 0x4) [ 985.571509] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.571539] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.663857] binder: undelivered TRANSACTION_ERROR: 29201 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0x6e, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x2, 'wlc\x00', 0x22, 0x3, 0x20}, {@multicast1, 0x4e24, 0x12000, 0xfffffffffffffff7, 0x100, 0x6}}, 0x44) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6erspan0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x40, 0xfffffffffffffffa, 0x4, 0x5, 0xfffffffffffffffc, 0x80000000, 0x800, 0x7}}) 18:33:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x3, 0x5, 0x4, 0x3, 0x16d7, 0x5}, @eth={@broadcast, @local, [], {@generic={0xe8bf, "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"}}}}, 0x1018) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="6ef87a1acaa883890566ee0bf379f5c6791a5e576d03cf99151955af617d225b870f93dae3376c0f7d2bdcb979d250468e4daa41247a79c476293e2e70e163554e3e2f4d689faad0651ff874153905b533d1f9c3ca1e8ca0f27379bb56329c0d7101df51dcd4657ee1f53dfb27ca3d8f3139d1e8e917b1f2c81d555c9c00369eed7409", &(0x7f0000000180)="ffb707cac9ce24a55abfd7"}, 0x20) [ 985.717789] binder: 16065:16074 transaction failed 29201/-28, size 0-0 line 3255 [ 985.718308] binder: 16068:16073 transaction failed 29201/-22, size 0-0 line 3255 18:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x288000, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4c884}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/keychord\x00', 0x8000, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) r5 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r4, r5) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0)=0x0, &(0x7f00000003c0), &(0x7f0000000600)) r9 = getegid() r10 = getgid() r11 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x5, r2}, {0x2, 0x4, r4}, {0x2, 0x6, r6}], {0x4, 0x7}, [{0x8, 0x0, r7}, {0x8, 0x0, r8}, {0x8, 0x6, r9}, {0x8, 0x6, r10}, {0x8, 0x5, r11}], {0x10, 0x2}, {0x20, 0x6}}, 0x6c, 0x3) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x3) [ 985.762875] binder: 16068:16077 transaction failed 29201/-22, size 0-0 line 3255 18:33:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163486f417fb67cd8a381000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000050000000000fbffffffffffffff51b0e99d700956a70752539d2e3e53cd9d902b5c7f437c7d4e654d5ab008ac9f"], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)={0xc, 0x3e, "915455f17e8c3306ec32fec6a13cd942ee111536d4a5d4a339f6e187dca3fce744c33a7256055de5242820680d21bf229f4db2d29a8b5ce00578385b7652"}, 0x44) 18:33:35 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x116, 0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xcf9, 0x0, 0x8, 0x15, 0x0, 0x100000000, 0x8000, 0x2, 0x4, 0x24d5, 0x5, 0x8, 0x7f, 0x3, 0xdcc, 0x4, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x400, 0xc62b, 0x9338, 0x8001, 0x1f, 0x5, 0x101, 0x0, 0x1, 0x0, 0x1, 0x3ff, 0x0, 0xacc, 0x80000000, 0x3ff, 0x200, 0x0, 0x358c, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0xf5d, 0x2, 0xb, 0x3, 0x9, 0x882}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = getegid() lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x6}, [{0x2, 0x0, r1}, {0x2, 0x2, r2}, {0x2, 0x2, r3}], {0x4, 0x1}, [{0x8, 0x1, r4}, {0x8, 0x4, r5}, {0x8, 0x7, r6}, {0x8, 0x1}], {}, {0x20, 0x1}}, 0x5c, 0x3) 18:33:35 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="116368574a7c7bb0eb228cda4840000000000000000000000000000000000000000001000000000000000000000000000000000000000011000000000000000000000000000000000400000000000000000000000000"], 0x0, 0x0, 0x0}) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') write$P9_RATTACH(r0, &(0x7f0000000180)={0x14, 0x69, 0x1, {0x21, 0x2, 0x2}}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @aes256}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/94) [ 985.805611] binder: 16085:16088 unknown command 808464432 [ 985.809266] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.809296] binder: undelivered TRANSACTION_ERROR: 29201 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x200050, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0x148, 0x0, 0x148, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@socket0={0x20, 'socket\x00'}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0xfffffffffffffc00, 0x8, 0x5, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@udp={0x30, 'udp\x00', 0x0, {0x4e20, 0x4e21, 0x4e22, 0x4e20, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80000001, 0x5, 0x1, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x3dd, 0xfad, 0x60000, 0x5}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x0, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffffffffffff001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/219) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 985.812764] binder: 16065:16087 transaction failed 29201/-28, size 0-0 line 3255 [ 985.820711] binder: undelivered TRANSACTION_ERROR: 29201 18:33:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = dup(r0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0x5, 0x2, 0x7ff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)="898dd6c7472932b110e331616aaa3d13bf4972d44aa4ea1b3356793247afd352da8f92e0903e40cb3ae37775371b35eb4942b873fd8b9ddae198395da440a8fcaa4bc4b2b236c9e0977116ea3e5293e8c2aad3f13542241ddeb53c6f149c14e6f1d99318550fb29a004ce4bf417543cd090e451582a79b03116837880c") ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10d000, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) [ 985.820753] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.868172] binder: 16096:16100 unknown command 1867014929 [ 985.868181] binder: 16096:16100 ioctl c0306201 20000440 returned -22 [ 985.869395] binder: 16096:16100 unknown command 1867014929 [ 985.869404] binder: 16096:16100 ioctl c0306201 20000440 returned -22 [ 985.987208] binder: 16111:16117 transaction failed 29201/-22, size 0-0 line 3255 [ 986.004403] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.012559] binder: 16126:16130 unknown command 0 [ 986.012569] binder: 16126:16130 ioctl c0306201 20000440 returned -22 [ 986.013388] binder: 16126:16130 ioctl 400c55cb 20000100 returned -22 [ 986.013628] binder: 16126:16130 ioctl 4b49 20000000 returned -22 [ 986.016657] binder: 16126:16130 unknown command 0 18:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x16) listen(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'\x00', 0x3000}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000010000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a50"], 0x0, 0x0, 0x0}) 18:33:35 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x24) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, r1, 0x3, 0x1}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000040)) 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280042, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x3, 0x3, 0xa8a}, 0xa) [ 986.016666] binder: 16126:16130 ioctl c0306201 20000440 returned -22 [ 986.021862] binder: 16126:16130 ioctl 400c55cb 20000100 returned -22 [ 986.022148] binder: 16126:16130 ioctl 4b49 20000000 returned -22 [ 986.113089] binder: 16085:16088 ioctl c0306201 20000440 returned -22 [ 986.121945] binder: 16085:16088 unknown command 808464432 [ 986.128258] binder: 16085:16088 ioctl c0306201 20000440 returned -22 18:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/179, 0xb3}, {&(0x7f0000000240)=""/81, 0x51}], 0x4, &(0x7f0000000300)=""/142, 0x8e}, 0x7fff}, {{&(0x7f0000000480)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000003c0)=""/19, 0x13}], 0x2, &(0x7f0000000600)=""/110, 0x6e}, 0x7fff}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/54, 0x36}, {&(0x7f00000008c0)=""/59, 0x3b}, {&(0x7f0000000900)=""/198, 0xc6}], 0x5, &(0x7f0000000a80)=""/134, 0x86}, 0x7}, {{&(0x7f0000000b40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/10, 0xa}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000c40)=""/219, 0xdb}, {&(0x7f0000000d40)=""/6, 0x6}, {&(0x7f0000000d80)=""/207, 0xcf}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000f00)=""/209, 0xd1}, {&(0x7f0000001000)=""/230, 0xe6}, {&(0x7f0000001100)=""/221, 0xdd}, {&(0x7f0000001200)=""/115, 0x73}, {&(0x7f0000001280)=""/89, 0x59}], 0x9}, 0x3}, {{&(0x7f00000013c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/232, 0xe8}], 0x1}, 0x9}], 0x6, 0x2002, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000001700)={'veth0_to_bond\x00', {0x2, 0x4e21, @multicast1}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffcd9, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0xfffffffffffffcc0, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000001740)='/dev/rtc0\x00', 0x0, 0x0) 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x20040, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) bind(r1, &(0x7f0000000080)=@can={0x1d, r4}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) 18:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000001c0)={0x6, 0x8, 0x1f}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="111be137c1634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x109000, 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) 18:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x480, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) [ 986.180222] binder: 16142:16145 transaction failed 29201/-28, size 0-0 line 3255 18:33:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) fcntl$setpipe(r1, 0x407, 0x464a) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'team0\x00', 0x1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x2e) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x300, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000200)={0x7ff, 0x2, 0x3, 0xffffffffffffffc1, 0x100000000, 0x9}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x10001, 0x4, 0x8, 0x2}, 'syz1\x00', 0x42}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/172, &(0x7f0000000100)=0xac) 18:33:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 986.182391] binder: 16140:16147 transaction failed 29201/-28, size 0-0 line 3255 [ 986.182857] binder: undelivered TRANSACTION_ERROR: 29201 18:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 18:33:35 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x5) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x1f) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 986.201693] binder: 16144:16150 unknown command 17 [ 986.201702] binder: 16144:16150 ioctl c0306201 20000440 returned -22 [ 986.218707] binder: 16153:16154 ioctl c0306201 20000440 returned -14 [ 986.222000] binder: 16153:16154 ioctl c0306201 20000440 returned -14 [ 986.307755] binder: 16162:16169 transaction failed 29201/-22, size 0-0 line 3255 [ 986.310025] binder: 16167:16172 transaction failed 29189/-22, size 0-0 line 3118 [ 986.310361] binder: undelivered TRANSACTION_ERROR: 29189 [ 986.321438] binder: 16162:16174 transaction failed 29201/-22, size 0-0 line 3255 [ 986.321782] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.321810] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.365403] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 2047 (only 16 groups) [ 986.378830] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 2047 (only 16 groups) [ 986.391118] binder: 16178:16184 transaction failed 29201/-22, size 0-0 line 3255 [ 986.393373] binder: 16178:16184 transaction failed 29201/-22, size 0-0 line 3255 [ 986.403996] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.404026] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.427472] binder: 16185:16187 transaction failed 29201/-28, size 0-0 line 3255 [ 986.428202] binder: 16185:16188 transaction failed 29201/-28, size 0-0 line 3255 [ 986.428546] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.428557] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.555408] binder: 16142:16158 transaction failed 29201/-28, size 0-0 line 3255 18:33:35 executing program 3: r0 = inotify_init1(0x800) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x83c) write(r0, &(0x7f0000000100)="74338b898bc99eb7ca41bf433527c2171655fc87282e61996d131dbc827d4f4e27f02b0b0b2c3eb75ec3eccecb0ea3fd1a90328b3f9f83e6137d8df0b8a25074dc2c3caf501579879865e6f9f69d77b70ff0311398f52acdf8ddd44f8914d6dd8bf233b75c333ee1ef61a59e6bc821728c551a2b5b5c2bacda4e7eefb3339233252539594df4ee33", 0x88) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634800000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r3}) 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xfffffffffffff1c5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x5, 0xb, 0xf, 0xf, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x81, 0x0, &(0x7f0000000080), 0x41f00, 0x1, [], 0x0, 0x2}, 0x48) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, r2, {0xa}, {0xfff3}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="580000001400194640834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcffb6ac68d223acb26816d27d77f24b15d8c866017ad2f2b28b2e2b01bc9fee8724815d4137eeb57284e5bfe418afe070f4b759e4bb6e0e4fc5e755", 0x8d}], 0x1) 18:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) [ 986.564391] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.570234] binder: undelivered TRANSACTION_ERROR: 29201 18:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @val={0x3, 0x1, 0x5, 0xe21, 0xb9dc, 0x1}, @ipx={0xffff, 0x57, 0x6, 0x11, {@broadcast, @random="c66153233cf4", 0x6}, {@current, @random="13df80ec0899", 0x10001}, "ef6d582bbdaecc5295b1af49a55eaac8b25d2ce6c03d399f3d3ca24b7bcb51430bcd2a60517eefe58837e5752fcac795eb5cd6a7228fc988f1"}}, 0x61) 18:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40000, 0x18b) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="0916119d7a1cdac2428066e515bac13ea105752f539daf80ab31a90371e65a131a4e2ece5b732ce7107ffc4a1d1608c035f79846c09f950e4ead044f45876eb1b30a5eb4c8be66cee2159c9a84d4f4924a65f551f06ad0397e5152abc7d1d96f14c2328f9128597e47ddaef33855597e0068db6a8f0af3903c1e3348be2b16c8f1bd3751a4d79c4975ddccd9c4e9e1ca775cf63cca6d1fe974558520534e4138a66ff3b84c78b4aaf070551f59d0c3e4ad1648d01f03156d34") tee(r1, r1, 0x100000000, 0x1) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000340)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11634840000000000004d114000000000000000000000000015a89806d0f4c5fbb3bf82542943f252e0c56f075bbfc5a5a7dd1f3c989b8bb3333de24121ffb4abb56ca07ab8eab0390bfde24237d6b7fd3725b055125d4eada544dfc37b619109b8eb478a9fb912f5463fd5881b6d09dce5d3e6106965724b57c15736bebb7285758ceba85cda1ed6ea8dfc865da75b96dfe20723fbd4390f93152f5d3ea24e8a5cc9d73cd27ff4e20c093d3c6924a74a3a923dd10a6b39b52249ff70256"], 0x0, 0x0, 0x0}) r2 = request_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\\vboxnet0wlan0eth1!em1\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)="91c53a86a11208d07ffcb0fd10ac684750107011f6b067eb35157bedc33fbad376fb6aca5de0644be5526fea092806ef79a624f57a5019043b3f49aac51e8ee4e9ed63d758a0dcbf90b2d0da78003bdf", 0x50, r2) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CLR_FD(r1, 0x4c01) keyctl$negate(0xd, r2, 0xfffffffffffffffd, r3) 18:33:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x8001, 0x2}, {0x1, 0x101}]}, 0x14, 0x0) 18:33:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc45ff810580000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcfffcd880ee856dca97076195e2", 0x64}], 0x1) 18:33:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x8001, 0x2}, {0x1, 0x101}]}, 0x14, 0x0) [ 986.612295] binder: 16193:16197 transaction failed 29201/-22, size 0-0 line 3255 [ 986.619689] binder: 16191:16202 unknown command 3 [ 986.619698] binder: 16191:16202 ioctl c0306201 20000440 returned -22 18:33:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x4db7, 0x8001, 0x1, 0x6, 0x1, 0x3ff}, 0x2c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x10001}, 0x28, 0x1) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:33:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:35 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa400, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x2, 0x80000001, 0x100000000}, {0x7, 0x3, 0x1, 0x84f5}, {0x40, 0x5, 0x0, 0x8}, {0x8, 0x0, 0x10001, 0x1}, {0x8, 0x1ff, 0xfffffffffffffbff, 0x8}, {0x6, 0x4, 0x6, 0x7f}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x4000802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11514840000000000000000000000000040000000000000001"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 986.653186] binder: 16198:16203 unknown command 4743953 [ 986.653196] binder: 16198:16203 ioctl c0306201 20000440 returned -22 [ 986.680740] binder: 16198:16203 unknown command 4743953 [ 986.680750] binder: 16198:16203 ioctl c0306201 20000440 returned -22 [ 986.704045] binder: 16209:16212 transaction failed 29201/-22, size -1128701264276777918--877782625333494923 line 3255 [ 986.715629] binder: 16209:16212 transaction failed 29201/-22, size -1128701264276777918--877782625333494923 line 3255 [ 986.716488] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.716518] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.774466] binder: 16224:16227 transaction failed 29189/-22, size 0-0 line 3118 [ 986.774915] binder: undelivered TRANSACTION_ERROR: 29189 [ 986.779757] binder: 16226:16228 unknown command 1078481169 [ 986.779766] binder: 16226:16228 ioctl c0306201 20000440 returned -22 [ 986.781600] binder: 16226:16228 unknown command 1078481169 [ 986.781608] binder: 16226:16228 ioctl c0306201 20000440 returned -22 18:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000001400000000000000000004000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x8001, 0x2}, {0x1, 0x101}]}, 0x14, 0x0) 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x97cd) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x1}) 18:33:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffe, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x2e2, 0x0, 0x0}) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="73c197bbf1f187c989bcf6905392f17f980dc247e877f1039e2a5b468df35b699271ebb28cdfa0a0741408"]], 0x0, 0x0, 0x0}) fchdir(r0) [ 986.782820] binder: BINDER_SET_CONTEXT_MGR already set [ 986.782827] binder: 16226:16229 ioctl 40046207 0 returned -16 [ 986.880820] binder: undelivered TRANSACTION_ERROR: 29201 18:33:36 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840000000e1000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffff66"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xdb, &(0x7f0000000140)="1d6b80edba770a79960ac222e5d16245f8754eacd21a52a941c0c07608cdda5280eb26ae6cede31c5fe2a889d9213cd7145ffd15f06f9a68780e8d09cef49c344aa0a8bbb85b888e196bbc05cc27b38cb8bb04994efe70e166e108aa3fe39320ce5ce7ef70bde001975564f2fa4b633e7a58cf2ae37ccfe15e8356a805d531684b12732aa94cef2cbd3892f102e7de68adc355294b66148f73fd75bbe342f37337ebd43edea7880d0dd8447182af7f044601d021e63201f475949801c251b370fb66670dab186c08146785441a312f7400ff22ff173ec6f6190d65"}) 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x5, {0xec5}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x1ff) r2 = accept4$inet6(r1, 0x0, &(0x7f00000002c0)=0xfffffffffffffe8e, 0x80800) sendto$inet6(r2, &(0x7f00000004c0)="27b8efc9f9963d6f334cffe4a4680f388ef393e36951fd6d9063200e6ace76b7b1251fabd1cceb", 0x27, 0xc0, &(0x7f0000000500)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000000c0)={0x1000, 0x101, 0x500000000000, 0x4, 0x5, 0x3}) r4 = dup(r3) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x400) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@generic={0x2, 0x9, 0x200}) write$eventfd(r4, &(0x7f0000000000)=0x1, 0x8) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000180)={0x6, 0xfffffffffffffff7, 0x8, 0x8001}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000380)="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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$unix(r4, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) listen(r5, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1000000000000175) getsockopt$inet_buf(r0, 0x0, 0x35, &(0x7f0000000080)=""/38, &(0x7f0000000100)=0x26) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000003fe5cdf800000075454f7500000001e4768de9a15e6863861b788806a3f88db8817fc10075ba2c5264e9565492d17ed10d5d9f547491f5258aeb6d5b02cbdf837512d86b5c6552bafd1ea4dc19e9c599eaf564291ea1aae7fdccf001000000000000001bd4aed1d344d49b55b56d73c9e29ac3581bd983383fcd0c224c96862939040080022f104ba2"], 0x0, 0x0, 0x0}) [ 986.928310] binder: 16237:16240 transaction failed 29201/-28, size 0-0 line 3255 [ 986.937825] binder: 16234:16243 unknown command 536870976 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000e8"], 0x0, 0x0, 0x0}) 18:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) dup3(r0, r0, 0x0) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000230000020000000000000fffffffff01"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x10}) fcntl$setflags(r2, 0x2, 0x1) 18:33:36 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x60c3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x38, 0x0, &(0x7f0000000000)=[@release, @release={0x40046306, 0x4}, @free_buffer, @increfs, @decrefs, @release, @exit_looper], 0x24, 0x0, &(0x7f0000000080)="5ec16095e59e412ed62e20fa8004aa15d1050eebd7551f3e32494108c091c8ce252cd8ba"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 986.937836] binder: 16234:16243 ioctl c0306201 20000440 returned -22 [ 986.941232] binder: 16234:16243 unknown command 536870976 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000080)=""/152, 0xffffffffffff8000}) [ 986.941242] binder: 16234:16243 ioctl c0306201 20000440 returned -22 [ 986.944035] binder: 16238:16241 got transaction to invalid handle [ 986.944045] binder: 16238:16241 transaction failed 29201/-22, size 0-0 line 3118 [ 986.944424] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.014625] binder: 16249:16255 got transaction to invalid handle [ 987.014637] binder: 16249:16255 transaction failed 29201/-22, size 0-0 line 3118 [ 987.015555] binder: 16249:16255 ioctl 8912 20000000 returned -22 [ 987.017457] binder: 16249:16255 got transaction to invalid handle [ 987.017466] binder: 16249:16255 transaction failed 29201/-22, size 0-0 line 3118 [ 987.020346] binder: 16249:16257 ioctl 8912 20000000 returned -22 [ 987.020693] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.020743] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.028934] binder: 16254:16259 transaction failed 29201/-22, size 9187827634713855624--1629086813141008191 line 3255 [ 987.029363] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.097747] binder: 16265:16270 transaction failed 29201/-22, size 0-0 line 3255 [ 987.098647] binder: 16265:16270 transaction failed 29201/-22, size 0-0 line 3255 [ 987.112990] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.113020] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.126689] binder: 16268:16274 transaction failed 29201/-28, size 0-0 line 3255 [ 987.139825] binder: 16268:16274 transaction failed 29201/-28, size 0-0 line 3255 [ 987.143325] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.143352] binder: undelivered TRANSACTION_ERROR: 29201 18:33:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) dup3(r0, r0, 0x7ffff) 18:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000effffffffffffff"], 0x0, 0x0, 0x0}) 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="3afdabc7ec015b461343a99ed711595fe3f2e9ece14ee9809730b35f805ece71a8f6c54073ae825e80ea6c49eb66238ae69bbcd4c791c376bb07f41bc25dff72f5689ce12321c3c3a14fab93e70cda35e342af2959772bbb9332a92f662fa27f61bf7ee85828792326d5e26a017bb7f9e4fe814309eb1507f02063f03b1ad848d0cc5a20e52db7e049d52426cb7abe2f6421c6a4a974de0b348d519a", 0x9c, 0xfffffffffffffffc) r4 = request_key(&(0x7f0000001800)='cifs.spnego\x00', &(0x7f0000001840)={'syz', 0x0}, &(0x7f0000001880)='}$ppp1GPLppp0self\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000001740)=[{&(0x7f00000001c0)="3d775c5e73794c08e0d24bde1369350fb5637b77b3b6d0529e2a9df3a3f5d30a2e2513086c63c61f8c12c85b1efcf284b8b2fad8d8895a5cdf701e4bf0402a1b52886077afc8aa4672878b8db35e52b99ddb69dcae914ccc5a9e9aae2f8f4ca1ec4f0489583efe771d210cdc121895", 0x6f}, {&(0x7f0000000240)="fde3056051317bb4bb5b811c100d30143a341fcfacfaf97e47f4e347208e9b796775c89b52a708e46bbe61f853b1a442498269b67b9d610c84549eec1e673154d065e520e43c824be4ef6a6f3a9ad7f0236910e235bcf2f4c4693974426d302934c536d7e417e1e8fcf928566df9bb195b89dfb6c2ed5cefb480e3cb109c557e6fb20abced5d527ea2c88a68c74903c661b4", 0x92}, {&(0x7f0000000380)="6d94c79fa4cf6bb769420bd2bd02fdc39ae1a0c0cc5258d02fcef02c1352aa478ca61a97c44bf55fb9c79b75ec7e03a6bdfd1ff8c34e1f241a3ca77bf46e16f98ea9df54c2b4ff79b80ee56cc9c9ac363aaa9396f65c2a1504dfbd873ba89ae02bce6637da7de30718514e39e361675194717623b49e03c626bb9d9d03378b5b68ba4fa2b352e8aabbf398b8c6929c8935e259205d6b166fef388cf549c618fee440f76d25c0edc438e06fa93adc8853b69b0dd47055fa3331abdaf3a8763e7fc82f6b37c63e53f0d1ca8b4fa3c8df53ddb2b8343817bcd3c3579c73202b5a62cbb39ebcc38aebcd2900b0351ee7df28b855f8d0d7a2a78eb1eb011257bfe5f2d1a001a7fb3fb6245b7bacf5c7e37fd5632d12b0f8cd498fde3f2475d339b9f7a89963e4cab76860c05032e0682d2bf31859003b7df102d5a98febc140673c330bdec4c4a2382c2a58a78d4207c1a60d0fa4cff9957a716fb62f6b44df4215b4160cf571a960923acb675a343bf278ec7f566c5adad051ed363d6556a6472787dea73ad241b090877ed8b675758d91e83ad8d89b92f47c04fc435310678e3ce2fcbd6de7d3bbbdd00ccba269a3da13e55983daa69db50c8fb187e4f80278dbff71d7a8eae789ebc235c4a8bef808c870fb7cebc7b8e24e6021e505bf6f7374d94c5cfaac1780384a6e3cbf123bbc7e016ab01e5c1dbbdd9d716b49329ed4627c8ac5da4d6fc4c00fc006bb66f777a322741d85f0126b7950fb4b9f1606a9183cc857f27bea6c0fb6bf0874eaacab1ed1d990955c0c2025611bdaabbcbf1ef0184f070e801e49019f2b27ff9eccfc559a858a818c4e0b00762e1e09421f5cc314a1d74473c80131dbb1c2022946dd06b096b7cdc2c30230c209bb946d86e639059299ee30a5cf2f0ab4d1b352d5aaeee485fd9ffd2160d4abc42554aae48c8720921a2d9a4f926d3513e1af1dd914c5768c8f536443fed1c2afc952dd123ebb3fb4bfbab52480bc24e0ffc0c75a6aca6f71e7fa5c88ea4f117ed361acf58463302a4a1f9f19a18c0a54b99dcb520bfdaabba67c57172eef2783fb3108d854ba6341621d441c0b80157de015830f2627191898994ba369f7f1ba9af963dd35f76c51e0544c2e655b4b1b869a43dee6fcf6ef808c2a93a63fd30e5c7b9415070dea84774d58e7f7ee4e62cb0fcaa39f47a86e48d8e522c6d7b38a2c3a565db1ee273b87327dcc052f5bf2da14d0259f312741b4883c4011900f1ad538d56300d5af49f99b977a2b62f0123b9bfc9bb1d9525f93d46b22a8a5d99aa092f3ba12ddf9c349c142354e8b2c5252685b6b8a9a96c46113c215c10124647e258f60efc9dc838200fcc4d5399c2909fd8ecf8b2a3a95201a9485756df2624656670f81f1a816abba3b0d1972cde93548d739876d9e0903e5b19396a5894da8c9055a8eeef967298d5013d5fefcf22665d5e3ec3913e61c08baf9299a319d61d917fceb2698f0c08280d48e2c2db56359f26ca5a6f2e83da70d2e7dc67d3021460ab653c04953e92da4abcbf1ae0fce6eb7509408779aa3d36b14c59460b9acfead9e061bd16d489547aae2d597b9469331ce01d36344c17844e946562aa691f01b7a3edbf97f332f72a850c84f188ebfe48081d1ae40df55a7b89f8d7ecabef85b1b8bca285a6d14f3b42447d101993e5ff010ad638345d6104d36c5b94b5c9487b72f9e3c6e08d5dbc3469cb2e667a76b6d67a05f935044c4fff5984257be7684740991bdd38350bf64b58021c316982b11fd6677a6b6a8dc9ce1c437f33ddf2d63c0a7ffb8369e354300cbb86afdc5a31a20057a88ba8dd04ee498adc5450377139f2bedd3a0d12c3ab54e7b315d293381c65a9780eb1d0a6b239fab0017104f76d0d6d13d08dcc1afbb871a36ceed9815b4fd7befcf4145d29bf374a941d6470b0af74ad9b8e7f07695da1140ce300ed4c61f3469079338b1a1d49032b2aa7167c56d2543990da7a9459171b141d4ce017735cb7a0b5ec318e723d6ab9323d5eb8e6c56258d383d9fa6edef4ada889bfa62343871325336b98cd7d2fe3bf09c10df37e8ebb6c3a3167c91b793602dba26e956dff0f64415ed5456b7881e3c0a6c4216ea582fe8bef061e5aa7ef3bb12364d5cf051a8ef7367098e1ac25609523deff72ac068f8de2a270e17895b994bb8fd576c61ccf9b3f645253037908d2593e3fc88fd89b652a68780c1b6c3d4d3023ed9c10ded3557a2a8a7b1c187c538b5736f71423b272a24def189e049ee49d7e46fe0d423b96f585544d5c200d4472703ad64a57c1f551bd097e69a0e16ba33451edd67e273e11910c678721ae62cf9fa5e10f4ec8868c6ddcf89f38ca417160db85662eba73b246fc2c292f84c8b21c1c188b5a7af098e0a9633a41a4a736af40506f9f9f84d023306a79b488726a11634a280067afd198e249019916cbe9de4427ca963faace96ca73848847ba7f902e2d5122068ed66b5a36e464803bd8c3df156c9aed7a05d7de0b068764ed69d0076b65e659ba398afda8fb400b5f962ea527b7097784614efe05a731ee2507a5739c67536a7bdf993f80b97dffcfa8c334390d9414db6473ecad7802d4848dd94fcad445eac990c22ca6bc759b3d6361cea1528eb17c30ce915e4c7c077520a7fe428177258fd70230eafd288a3ee682c7e361e334d6e39b37e5d2b9e862a595f33f17e390eae96688bf7d69b4d67f25491dffb12f7f48b6688d0a103dc1be7eddef55e3ead56f7ac8af8908090623f1f3db058f6ed82a4817f3f747b61567e613fdfbfe1ea6fe2dd454776cb575becc04a9eaa143f2b9fee1f5643c403d3830b098615b60aa4f17bdd587a1d527d1f2fcd5ce071e381d58a8c4f02691eef4cf89317e302eb76474b6d2a8af0124939d239e7e9b29c55307082d9caa49dc6d89ad33d31333b8ec2a6a774baa1d80939d1362abcb94c9511504b812ad4e9683da31d9bbfc2003e172de848ca3b3f7f963a854d5534d214a39a3d8cc1d0acf1c62d46ab7d21ca42eb1b009e3f600c2f5062eb46f410264f429654453f5fad36d164b57bbfd585f4f6ba75342100728969332041deb390b0563e194d7f9bd402db61c6d41a233d1bd27cef681a904db30056cdb21818ae05ab3c814cf864c8b765ed83e32d784c08523c681a4e8b36959b9c3fa6c132c2047fa955b8625cf750564bd13f8a327c06086f7812e3e8dc1ae13b616c72bdf22e13b33d7051c6a8743fe0b88204907a728b6bbe31694cdd89e352ff8d11dc4fedaa4ef208721217b3606e75baee63b0b6e454009b6a37623baa1b167da12bdf24fb6adeeff83648d20b1ca6494a25a7b34bb5bf91c92d9276a52ef9e74a96625dbcf7de51bf1911dd800df0e4b2f1d76ac47e2af18d77c90edc18a8b742f667de32cc7574bd22b087868a28607c9cce20e33aa1ec243b5a3a6914f58fbd0c8bcc33c092f5616948501d65e065a08b4d9cd320aae0a632720a1ec577efbf32e64a04e761b62891e25833e47fe42571151f29b9eb53d49c5230e4e423a2167ae785bbd09994b8d4b690f5cf8dbee0d0e0596c0ba02b54afc4eaa5e82acc528126086c913f1916bf04c307bf31c0ab1f13eadb9eaccef0e128e8947d911079f1121ff40aab33adcba35ceb2232bf6efb4b31caf09669d4ca6e0374ab0c20ce2d8f4fa403ab44606e0be646b4a12c34abcfd0a0d9c3580d4bb46801d97987ba2da77c3ed804c1fbe81cdf6f3946dde9360daaa929226841d1634bb0b9f4d9964e4708db4657f4962a3da2a9af56d9ea7d852a85d9403015962bea58bdb4e51ac931df702ebbcbc10ea497dd87b0b451bd4ba3fa1c095d30a1e8df8aa2b2369972a0f03711ac6cb1522338376570f4108975d2650586a11735c133bb1e2a73f54bc158b57eff2bb382d224959960e2779b6fdd403105bb942b5e1fc416106c7170813698855920c628b29f4c6bbc45ef8f9cf9855bf95aa96473041ad5724ad85925bf265ceaa432b8998ed51760be89c6fa655c5c24f9bee3613ff82ac9f3f131ffcbda20a8f8c5cc1ac44f45ea96524b3498be1c168e2c3c88ec21a82013e926dae384dd49141fb5c0f348b95c7d18359f33e8fc096e0ed97100316fc657b93824b8f99c32957b5984c4b92573e33d46042b5cdce2c22cf865e8bdbf2df805caa2809464c939675e683706ff07fe0bc27c7d952fc085f953854ac6d76efb4bb41b079bd86dc877427e68ec7b86652871dd656e61033ae37b61ff51e01db3ea7868a79edb7a43c3c7bc48bde37fa70fc36ba493576a23670ebd3c398a281def0268a29ed2266724dc7c7b85a47cb0f8be0d55574265ff523833d165c35a7c77d6daa1e0e61222ec8cbca6e999ba97bbee794f7911b0bf4185e97d72f8b97639704bb635f6f0ddce7574570e86e8a9c4d28a6bd77b4bfca88ab6c0ac79123d177954a029fe362d4e310090ab5368cb33fd11b58130ac3af5479d5471d9cad56f2b55933d932fb63ab1355c22632e3552056aefa88f05065fe95df96fc5454211cc95a92e0720433037deac9c5fec61a3d49a435957bcd6841bc66a107f86c22cb23fbb559af1bc6e1533f4830cb55831595ec530bd41af9adb8d2e22e1541db46f7ab8acc6569965211d0bafa8ba073170a3ee81df0b90d9efb2140672c99a7041a3dcd24f232b320ba59bc4e93f7adb3aa562bea82f57080dbc071e38db162399af446604ae175276706b37d5b86b06eca83fa767872957adbf78c5140dafe37d462fcd783d644214aa7e17d3db3012a84e8ce73bb184092c95386d1ef35a1a460923f0309b11255a2a032b69bf02ccb473d9fc2358df91c1351b651d9d412558bc37116cd5def38fd6736bd198539c6990b1ef628cee9a9bf02d87ec57206652d0450f5088cbd27aaeac3e5a5c988e456554c545964d80b9230055bc72d5887eb81f21a36bdc8c450f0f236cfd9ff8cbe527b75f08ff95df1564644a636e90561158616252bc081f9f475495c49163b99bd6948f888292ca09dbcadca0bfd1d4f038524b1873ee4227b8130d71d45cedbe380c93d41c7fb7556c7233e48a2ef641403b2b70a7998676a882a59d048700fe1da56a3e9292b476c14b5489a3e46f94461b21aa4bf113f67d5b45bc1c734f21d986389ca472ff51e3083ff0ca337b4aec5e0ea2d56186a81adde9ceeb19279b60655630ee49582b8fc786e636d8a65653c00e46456b4e681fb41fb5592f9ea83549c22c1664dc0c486c2548d1c4e820c6a7df405b640ff3feb470951bf2f1bda8c15a4d3055893a5a2651977412e2e68e53fb72e47e8049cf53bd87a6d299333a4fcdde61232a9980e9ee426cca4d5f23bae71543b0ca3c38c79380b674fb45b9e76669b1a665180f0d9ad8d65ef962cadeb5d2b9b97077a53ab73d43946c174a900f229d8fb5ac37389ad09d879ca813d2fd4f4232b2acd978278b16e38dbb72fe7cdb0b8227b59889d6c2527301b9aae4fb03a3b3afbf2569055bba13875d162627b1843ba328fcf025df2d5d162cf428a964cfaf189a15cc47b9cc05d9dd09958e65aae31d8dc752b9fff184c86c0264146e8265bac362657ff2ec2381e6fdbb47389ef22bc62d34c1ce99d675cd75ae86266e2a0e5b231b47565a7a1274070158644a88f947601ca7cab062fb14aed85c6c728b808c66c4e553642985bce2b2abdb03a6b49baeedf0ffacfe8fd045a724abd2f0fa9d05528142ded65afe4e8647d6b0dea1f8c3251eb3e7084540550a70323c2b541257696a3266", 0x1000}, {&(0x7f0000001380)="280f75025272dd71cc62ad8cc5c24c8b38edfbebaee29ec5d0a43539c8696cc36072dbfde42248171123dc961c6cf4e51dd55038e32a216f092d4e68260b0ed84e396c7e956ebd8b8a0209c42d8f", 0x4e}, {&(0x7f0000001400)="613e9aa0c6625c3b0a61f93c1a1c4f3887fdc6e48605840d48b1d2e7c3471a18340636fe3159c5106cf0bd87f283e5116ca3a60036db7c0eb7ee22d75cb8c8011f66932ab2e9a92272f0de42e9f74f54ae4a2a986e7bf163630c128ad5c4ffd315a42ec5d03013244aeb93e3d7fd5b7a05084bb6cab60f53edaa1c2c0b7fd97cf1f8f047520ed450cea34a2e4ba7c41907d33a10aefd420a2a9a5206c6f621a62ec6a23abfd29fad33ba3aa5d8c6ed", 0xaf}, {&(0x7f00000014c0)="a088c565af38a800de45490252a124815a81d3bbacc48aea535f5ef586da05cc5d0fd97c1faebee6a20416c8907d47881eaeaf5f80dea4a4930a17b2aecd843e01de4942307ca30624c61f6dd8b7030c263706e663c541", 0x57}, {&(0x7f0000001540)="99a64e50be83dc2956739995d6dbff81d8c32f2236d640f89733defc34d4c7b5757eb918950f11b826e7f14fe72f423189ab2dca0d70475ab0f600e61413a9355fb9ceee28d1eacecddae69947521d3c5815eb77fd1219da", 0x58}, {&(0x7f00000015c0)="beab1dd91763b3cd95627a4f12e35ef866dd4add18ab4300c08f738bb0708e1974d3df9740adf17d94c42a96e373183c08129d3c20a4191c72a02e42651e0a215e5181f4cd193bfe22ff93112a330732bc55fe6b9ca1ed75c55e1cca2c0851cb731efc6508cb05e4044dff8500366e6a9ab5899652ee2f3b2dffb19e4e097781713001c5785f141716c41e39fd4fa822a5", 0x91}, {&(0x7f0000001680)="9b505807b83db67a2c335b9a9ae7d66c40896e96e82c065e981577b2c572ce0510a525df3b4ca932bfc81b433eca10a368ed9b24a2fe34bb6240ae4502d9cbf034aa5a9c8f68cdf33bda95f11f9e4f554e3f62fa67368b05b5183b8002f0d84038391f692f2dc271b1302a16f0fb418e3758a84e7375c3f6a0df3416da6f7d059c5e7ecc029b9879816ba9", 0x8b}], 0x9, r4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001c9c6c702647815341aa4f48f05e8f1ee984b7a0c696acc96beed36c15b29058834df9427d5000000000000007f0f980852aaaf12ced324f91a4ebe1f9de5c37a3f"], 0x0, 0x0, 0x0}) 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000007f000000000000000000002996f3b12b6d36637417d7dd8ace00000000000000000000090000e85054a8399e"], 0x0, 0x0, 0x0}) [ 987.283939] binder: 16237:16240 ioctl c0306201 20000440 returned -14 [ 987.293326] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.320966] binder: 16282:16286 transaction failed 29201/-28, size 0-0 line 3255 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) alarm(0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000080)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) pwrite64(r2, &(0x7f00000000c0)="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", 0x1000, 0x0) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000480), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11630000420000000000000000000000b7f1e7780001"], 0x0, 0x0, 0x0}) 18:33:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0xd8e, 0xfffffffffffffff9, 0x0, 0x200}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:36 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) [ 987.338627] binder: 16285:16290 transaction failed 29189/-22, size 1098974756864-0 line 3118 [ 987.345298] binder: 16284:16288 transaction failed 29201/-22, size 8812305247908660623-3958029202412431628 line 3255 [ 987.346424] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.347364] binder: undelivered TRANSACTION_ERROR: 29189 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getrandom(&(0x7f00000000c0)=""/4096, 0x1000, 0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xb0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000010c0)='tls\x00', 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) 18:33:36 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xa0000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xdf}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f00000000c0)=0x6e) bind(r1, &(0x7f0000000240)=@rc={0x1f, {0x10000, 0x9, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x8}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=0x1000) recvfrom$unix(r2, &(0x7f00000002c0)=""/34, 0x22, 0x1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind(r2, &(0x7f00000013c0)=@generic={0x7, "0177f62dc3022d99999c00248bc7644aefc49b19109ab6f398f25137c99e5fecdd1e164cfd37a99c56b58fb702a85cfac53c53f0f0799ee195295af9b4fb1564809e39625e3d8efcdaf2b9bae5b1cfe6896159f37349bf35d8db8363b5085b1ab5f2b081f163b30c18cc73c7621183c8a627909a09a12a1df1850f098159"}, 0x80) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={r3}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup.net/syz1\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000380)="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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:36 executing program 0: syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) setns(r0, 0x4000000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0x4b, "08e8a09ca1d6e428998d87254346da5f38b2c10504620448f94cb7607c7e055e42448c1402a5892cb13e50181466b1d1446d8ee25a0993a5d5a31ff939ea1ba0f696bb5a0bf0457a4bc6be"}, &(0x7f0000000100)=0x6f) [ 987.411668] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.430991] binder: 16297:16301 transaction failed 29201/-28, size 0-0 line 3255 18:33:36 executing program 1: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000048b773d9583631c067693dcc82655af1966ad1b057a2c60b1dc58faceb96238670b882fc156121f42be5a85abb448aef6434cf17de26169674a0dc97eaf7907788d07e051ee60e253cdd111b2c924e4dfa0746beadc95392a628a0ee83de9340e0b69a6062d41cf53ad1f6011d67789541810e0675ea84750981c55b47b8645c1f1029bfe242d1d941b0f51f181608114e753e"], 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x41d, 0xe642, 0x1, 0xfffffffffffffffc, 0x4, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2800000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80101, 0x4) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)="ffce5a1ff3b10f4735dad21dd2915199056f377ff5c526ec44b909f39f3eb126eca1de9d89d26ebb23191d9ba2f4e2a49094cea1e0fb2c", 0x37) write$UHID_DESTROY(r3, &(0x7f00000000c0), 0x4) accept4(r3, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80, 0x80000) [ 987.476796] binder: 16306:16308 transaction failed 29201/-22, size 0-0 line 3255 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getgroups(0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) write$FUSE_ATTR(r2, &(0x7f0000000380)={0x78, 0xfffffffffffffffe, 0x6, {0x1, 0x4, 0x0, {0x6, 0xe6, 0xfff, 0x80, 0x1, 0x5, 0xee3f, 0xfffffffffffffffe, 0x4, 0x40, 0x0, r3, r4, 0x1, 0x1}}}, 0x78) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080027bd7000fbdbdf25010000000000000002410002001000136574ff030000000000000000"], 0x2c}}, 0x4000090) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x2) r6 = socket$netlink(0x10, 0x3, 0x400000000000010) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 987.480393] binder: 16304:16312 unknown command 25361 [ 987.480401] binder: 16304:16312 ioctl c0306201 20000440 returned -22 [ 987.485460] binder: 16306:16317 transaction failed 29201/-22, size 0-0 line 3255 [ 987.485983] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.485995] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.487906] binder: 16304:16318 unknown command 25361 [ 987.487916] binder: 16304:16318 ioctl c0306201 20000440 returned -22 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x9, 0x2, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x1, 0x2, 0x4, 0x3, "7069c95f"}, 0x14) 18:33:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8080, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x6) 18:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000), 0x275, 0x0, 0x0}) 18:33:36 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000000)="0a04") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 987.575487] binder: 16329:16333 transaction failed 29201/-22, size -6748731103108468390--7571768615006041146 line 3255 [ 987.576355] binder: 16329:16333 transaction failed 29201/-22, size -6748731103108468390--7571768615006041146 line 3255 [ 987.590735] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.590766] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.696563] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.696886] binder: 16297:16301 transaction failed 29201/-28, size 0-0 line 3255 [ 987.709697] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.743303] binder: 16349:16354 unknown command 0 18:33:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000080)={0xfd}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x81}, 0x850) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000800000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000000080)=""/130, &(0x7f0000000140)=0x82) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 18:33:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000001cb44c02005b0000000000000000000000000000000000000000000000000000db0000000000"], 0x0, 0x0, 0x0}) 18:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000007) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x7, 0x80000001, 0x4, 0xd08, 0x0, 0x7, 0xc0001, 0x9, 0x7, 0x1, 0x8c03, 0x1ff, 0x7, 0xffff, 0x100000001, 0xfffffffffffffffb, 0x1, 0xffff, 0x7, 0x6, 0x1, 0xfffffffffffffff8, 0x80000000, 0x3, 0x1, 0x0, 0x56, 0x4, 0x64, 0x3, 0x9, 0xaa, 0x20, 0x4, 0x4, 0x8000, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x5810, 0x3, 0x0, 0x6, 0x7, 0x1, 0x17a}, r3, 0xb, 0xffffffffffffff9c, 0x9) [ 987.749968] binder: 16348:16356 transaction failed 29201/-28, size 0-0 line 3255 18:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0x8}}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="060000"], 0xe1, 0x0, &(0x7f0000000140)="c840c464d555354c6530a6fee34b9817b21d78bdb4359ad99c61c8edef893f460a52461202f5f91abe2c907d3a377a4dc4b257ab2ea59dda4872beac6655a29b2cd1e9ce0832a059f47974672969e3e0ff88aceff39504386a4050f1a4eaaa6083044b7bf2cfd44aa1cef4daa574ddeb2f8af4ba895e7693696c4b7c82606c759986c68f71d6860be023068f9badde4deeb4c501e08c10d191458a314bdcb09df796ca427db4f771e7bdcfe0f8f8ba8f35a1d23c4d2e78fefc3d6526a7b3646c82975007ca2696f2c0a4d4c2027cc2d0f07f411bfc282da07576cde55106961657"}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) 18:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000004d0000000000001000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) [ 987.753610] binder: 16352:16358 transaction failed 29201/-28, size 0-0 line 3255 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 987.758923] binder: 16352:16358 transaction failed 29201/-28, size 0-0 line 3255 [ 987.759572] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.759603] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.764366] binder: 16348:16360 transaction failed 29201/-28, size 0-0 line 3255 [ 987.765346] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.765385] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.841702] binder: 16366:16374 transaction failed 29201/-28, size 0-0 line 3255 [ 987.843880] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.857849] binder: 16371:16375 transaction failed 29201/-28, size 6557243585913946112-0 line 3255 18:33:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163584000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff64320985bd8f45a86dfe8dfe22c780489fd24c3bc27464993a7a0f156e7cdbbb9dc0f0a3"], 0x0, 0x0, 0x0}) 18:33:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0x9, 0x7ff, 0x2bfb, 0x2, 0x3, 0x5e2, 0x3af, 0x38, 0x1e7, 0x0, 0x9, 0x20, 0x1, 0x1, 0x3d333a42, 0x4}, [{0x70000000, 0x20200, 0x3, 0x401, 0x10001, 0x69fa, 0x880, 0x2}], "82679a054ddfdb272b8fc6f3142033635876199123104c72370617cf576722d54edcfd06cf87197747106596fd68e3ea894156ee594ce94dc6c20a18e240c3f9c971ad8457558bc1d1ab85ce669bbc446dcfcf2b3bbeba636acdab250a9b0cfc85ebc65b624f5f87dc50f703fee03e6f27790f315c91620ced7f6a8b811caa55a7277ba80955ef6b71436ba0a8e9da6846001875084e95a7284712dd8bc252be0f878b08c64e281fd89bdd35b499ce1c2c8d73bbd4848089d2c8e320df2e0ccbab55cbbdd3ad", [[], [], []]}, 0x267) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x80, 0x0, &(0x7f0000000100)=[@acquire, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000080)=[0x58, 0x20, 0x38, 0x60, 0x28, 0x60, 0x60, 0x38]}, 0x1}}, @enter_looper, @dead_binder_done={0x40086310, 0x1}, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x4}, @free_buffer={0x40086303, r1}], 0xfc, 0x0, &(0x7f0000000180)="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"}) 18:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x30000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x2) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x50000, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) [ 987.858242] binder: undelivered TRANSACTION_ERROR: 29201 [ 987.907768] binder: release 16381:16384 transaction 1491 out, still active [ 987.907773] binder: undelivered TRANSACTION_COMPLETE [ 987.907809] binder: release 16381:16384 transaction 1490 out, still active [ 987.907813] binder: undelivered TRANSACTION_COMPLETE [ 988.001638] binder: 16349:16354 ioctl c0306201 20000440 returned -22 [ 988.010084] binder: 16349:16354 unknown command 0 [ 988.015008] binder: 16349:16354 ioctl c0306201 20000440 returned -22 18:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001cf432ee7737e8844533cfba8e55e04d0bd7e2256dd3dfe9cfee53f932aa1fc00000000000037e5d3ea79c90b0b54ab2e475f31388b06988ad09da64a24ebf8cd1749b8673b512eeb5300345f3e7dcde508203e59b0b1cd67364338ca3bb92c9339df75824a1d47e21675b9d1e57baa1328c23cc2b00035d6363e6dc31f1e595a9042c849adcd5c9589b8f004971ae42bf888beed671ea245074323000000"], 0x0, 0x0, 0x0}) 18:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x84) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) fadvise64(r0, 0x0, 0x5, 0x7) [ 988.058025] binder: 16390:16395 transaction failed 29201/-28, size 0-0 line 3255 18:33:37 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 18:33:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = dup(r0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="23000000370100012dddc214000000004000000000000000", @ANYRES32=r4, @ANYBLOB="17000600000000"], 0x23) 18:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe44, 0x0, &(0x7f00000000c0)=ANY=[], 0xffffffffffffffd6, 0x0, 0x0}) [ 988.069540] binder: 16393:16400 transaction failed 29189/-22, size 0-0 line 3118 18:33:37 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="c3e7f8a54ac9dd39789278a878412758fd0a85d599c8ef5cc53f5be1bbef6a43f4a22185d1403b071d4d6ee5098e601976617013686976c0a9a3c572dded50865f6490b3f37843a0aea8f096ef6401a78c5c84343a9f4d26a9a37e852c005cc2e753b569b3d732eab804dfc3d79790eb551e28ed187edbe6ed69a7780eb69ef07836ba9fef4c6aa00f005ac1e53f4abb18fe8636281e6d538eaa8fb0aa881902460000d7dffcaec53666477b4e2f073ab70455dee744a551c5bdeeb291e47624", 0xc0}, {&(0x7f0000000200)="47bc5e5a79e39c35911829ac90d2976723108fe8f653d6145060eb59895094e67c3a3f37c90efbbcf84cdf02", 0x2c}, {&(0x7f0000000240)}, {&(0x7f0000000280)="178d86", 0x3}, {&(0x7f00000002c0)="ef1ea75b27f0a144f7fe7c34f728f2522b8f7d7ce02a1e", 0x17}], 0x5, 0x4f) fcntl$setsig(0xffffffffffffffff, 0xa, 0x26) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x101001, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x4, 0x100000000, 0x7, 0x1, 0x1, 0x40000000000}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 18:33:37 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x54}, 0x8000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x1f, {{0xa, 0x4e20, 0x0, @mcast1, 0x2}}, 0x1, 0x7, [{{0xa, 0x4e21, 0x1, @mcast1, 0x200000000000000}}, {{0xa, 0x4e20, 0x101, @rand_addr="d2e5b7e143d803cdafeb4547d453d7ef", 0x2}}, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0x1000}}, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffff174}}, {{0xa, 0x4e24, 0x18d, @rand_addr="f48a9c7296af28a844b6d651bb3ba518", 0x401}}, {{0xa, 0x4e24, 0x2, @empty, 0x2}}, {{0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, [], 0x24}, 0xc42e}}]}, 0x410) [ 988.073149] binder: undelivered TRANSACTION_ERROR: 29189 [ 988.086449] binder: 16396:16403 unknown command 1079534353 [ 988.086459] binder: 16396:16403 ioctl c0306201 20000440 returned -22 [ 988.149612] binder: 16406:16412 transaction failed 29201/-28, size 2485632745479267752-4604366144290020694 line 3255 [ 988.151233] binder: 16409:16415 ioctl c0306201 20000000 returned -14 [ 988.152965] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.234987] binder: 16420:16426 transaction failed 29201/-22, size 0-0 line 3255 [ 988.241214] binder: 16423:16427 transaction failed 29201/-28, size 0-0 line 3255 [ 988.243781] binder: 16420:16428 transaction failed 29201/-22, size 0-0 line 3255 [ 988.244450] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.244461] binder: undelivered TRANSACTION_ERROR: 29201 18:33:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='wlan0\x00', 0x6, 0x2) 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) 18:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x12, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1c9640, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) 18:33:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000100)="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") r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000380)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x71, 0xe4e, 0x4, 0x10000, 0x8, 0xfff, "a94fc41483c20556cc85cc19f5fdab96db154c69797228af5ed5ee367912aebb073fc4ab87151d9fa53d39ddc70c841c9bc00d6c89aa8ddb2e7068b0f42522496cfd805ea40f94c10d83cc7bd27334aa7d99fef3aa35ccab39475eeed6c53c8a2b3a70138f0486cc08d603c2579c7690e8"}, 0x189) 18:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x114, r2, 0xc00, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf43}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x29}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4037}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x460e}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd241}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) 18:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) fcntl$getflags(r0, 0x1) [ 988.261986] binder: 16423:16427 transaction failed 29201/-28, size 0-0 line 3255 [ 988.264015] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.264045] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.340054] binder: 16390:16433 transaction failed 29201/-28, size 0-0 line 3255 [ 988.348059] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.353641] binder: undelivered TRANSACTION_ERROR: 29201 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') ioctl$KDENABIO(r1, 0x4b36) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:37 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) ptrace$peekuser(0x3, r3, 0xe96) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 988.409117] binder: 16439:16444 transaction failed 29201/-28, size 0-0 line 3255 [ 988.418944] binder: 16438:16443 transaction failed 29201/-28, size 0-0 line 3255 18:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xf3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000180f20d686116e38708965da80c1d55c9a57bb5a72739775ffe73d6e9170e3fa125b7af458ce5d0b38093f070a30294bb28d740df28f378101de9a0131dcfc1eb539dedc92bb0e789052cb30acad7269d5406e0c2a2a23640cc4be92a86687e37117385098d986351e63b07246385b0105650255a3ad99fb9022ada4433614a0551e15ed9d344c74fd58f35a42b6faac4f13d2c7e467696117ad95e3eade8265e88183d8b12178a461f21013b6cb3e84f800d23eec9ff14f7fd55182a87370c356efb50ee7e0c4de7fabcb553fcecc3420da4e1c31891590a01b9"], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) 18:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0x4b893e29, 0x9aeb, 0x1, 0xfffffffffffffff8}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) init_module(&(0x7f00000000c0)='-proc!lo.vboxnet0systemwlan1systemkeyring\x00', 0x2a, &(0x7f0000000100)='loem1ppp0\xdf\\(system#wlan1\x8appp0-\x00') 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) 18:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000018545ab32418b044c8fb6d00000000000000000000"], 0x0, 0x0, 0x0}) close(r0) [ 988.421838] binder: 16438:16443 transaction failed 29201/-28, size 0-0 line 3255 [ 988.430289] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.430317] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.526379] binder: 16462:16467 transaction failed 29201/-22, size -5369515846574207832--2993769641295665241 line 3255 [ 988.536287] binder: 16465:16470 transaction failed 29201/-28, size 0-0 line 3255 [ 988.536385] binder: 16462:16471 transaction failed 29201/-22, size -5369515846574207832--2993769641295665241 line 3255 [ 988.537524] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.537908] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.538110] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.550635] binder: 16465:16473 transaction failed 29201/-28, size 0-0 line 3255 18:33:37 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) fgetxattr(r0, &(0x7f0000000080)=@random={'system.', '/dev/binder#\x00'}, &(0x7f00000002c0)=""/205, 0xcd) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={0x0}) r3 = gettid() fcntl$setownex(r1, 0xf, &(0x7f00000003c0)={0x3, r3}) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0x0) r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1000004, 0x40010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xa0, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f0000000040)=[0x40, 0x20]}, 0x400}}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r2}, @register_looper, @acquire_done={0x40106309, r4, 0x2}, @dead_binder_done, @increfs_done={0x40106308, r5, 0x3}, @acquire={0x40046305, 0x8000}], 0x35, 0x0, &(0x7f0000000200)="17a0b867352ad7927c453704af65b05ffec48582f4900a36046727c2864d233524fe535fe7d8127b0f2e00f50589ae05a61e721a55"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x882b, 0x6, 0x3000}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffff, &(0x7f0000000100)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = dup3(r1, r0, 0x80000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syzkaller1\x00', 0x10) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 18:33:37 executing program 5: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="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", 0xfe, 0xfffffffffffffff9) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) r3 = getgid() getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x6, 0xb50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, &(0x7f0000000200), &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"]}, 0xbc8) 18:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:37 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) sync_file_range(r0, 0x4, 0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 988.550884] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.621472] binder: 16439:16444 transaction failed 29201/-28, size 0-0 line 3255 [ 988.621679] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.634742] binder: undelivered TRANSACTION_ERROR: 29201 18:33:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x17) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = dup2(r0, r0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0xfffffffffffffff8) 18:33:37 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x8) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000200000000000100000100000000f4ffdfffc72115398faf7bc60000000000000000fbffffffffffffff81060042bb4b05893f19d135f65f4cfae494eae9f9371fde9cd519ddd8baa8d67dbae755191075af79915428f457a5663b60b96e5dbbfac2f8273bf08cd22795cec3665afdbcb0e7d882c006c0ca2cd3d42c24c531c88666125de490f68e6e8d855dcb0c6a32a6cd6c3e31490a9cda18151a5a52545f68bda1eb482850bcc3e97a737f032fb0c6e61e56aec222fd6168492fd7be4c5188b7f2af3552cd3aadd5845e7ea7d77901297959a452067548ae76d540c916f435d5"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) getdents(r0, &(0x7f00000000c0)=""/117, 0x75) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:var_t:s0\x00', 0x1b, 0x1) 18:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348407e0000a331af83f5be0f9cd57cd6a3c1000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) [ 988.684896] binder: 16476:16483 transaction failed 29201/-22, size 0-0 line 3255 [ 988.718362] binder: undelivered TRANSACTION_ERROR: 29201 18:33:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) iopl(0xc3b3) [ 988.752991] binder: 16478:16490 got transaction to invalid handle [ 988.759286] binder: 16478:16490 transaction failed 29201/-22, size 24-16 line 3118 [ 988.793056] binder: 16498:16502 got transaction to invalid handle [ 988.793065] binder: 16498:16502 transaction failed 29201/-22, size 256-0 line 3118 [ 988.793437] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.798712] binder: 16492:16500 transaction failed 29201/-22, size -4144526002391539257-0 line 3255 [ 988.802275] audit: type=1400 audit(1553625217.942:86): avc: denied { associate } for pid=16492 comm="syz-executor.1" name="binder0" dev="devtmpfs" ino=86 scontext=system_u:object_r:var_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 988.810102] binder: 16478:16503 transaction failed 29201/-28, size 0-0 line 3255 [ 988.816412] binder: 16492:16500 transaction failed 29201/-22, size -4144526002391539257-0 line 3255 [ 988.817676] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.817832] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.927877] binder: 16478:16503 got transaction to invalid handle [ 988.934176] binder: 16478:16503 transaction failed 29201/-22, size 24-16 line 3118 [ 988.942194] binder: 16478:16490 transaction failed 29201/-28, size 0-0 line 3255 [ 988.942325] binder: undelivered TRANSACTION_ERROR: 29201 18:33:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000b2000000000000000000000000000000004683d3aee5bec6f0f506217263e77f923af214c050b87208333fea1175be770db07cb02af809bb7bb71749da6f752ba972a43d1b6e2aaac96076fc777cb8ce9965cb18377fe67300d62c5d3919e4ff0c83a6aa7250c9f4717b41a18f5521a4a498120aeade69f6063f043a2dcc523bde1da999c5ee13d7b1f3c859d4e7ea8100a70bb9dc37ca6d0104000000000000fec88608ed5f1e817b0620bd013a7b1848c2273cc334a70e0709b8"], 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) fcntl$getflags(r1, 0x408) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0xffffffffffffffff, 0x80) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x200) 18:33:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = getpgrp(0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x460, r3, 0x700, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7d9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x851}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x506}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @local}, 0x100000000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @local, 0x4}}}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x130, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @rand_addr="425bba53c32465c8d2eebee792e83f08", 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb504}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @multicast2}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @empty, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sched_getattr(r1, &(0x7f0000000000), 0x30, 0x0) 18:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa00, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x330, 0x0, 0x0}) 18:33:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffff, &(0x7f0000000100)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = dup3(r1, r0, 0x80000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syzkaller1\x00', 0x10) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 18:33:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x220000, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) 18:33:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @remote, 0x4e22, 0x4, 'fo\x00', 0x8, 0x9, 0x34}, 0x2c) listen(r1, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast1, 0x4e21, 0x3, 0x4e20, 0x8, 0x2, 0x0, 0x20, 0x0, r2, r3}, {0x4, 0x6, 0x7f, 0x7ff, 0x1000, 0x4, 0x5, 0xfff}, {0x9, 0x8, 0x8, 0x77fb}, 0x6, 0x6e6bbf, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x4d5, 0x7f}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3507, 0x2, 0x3, 0xfff, 0xc297, 0x2, 0x6}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0), 0x0) [ 988.942338] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.960735] binder: undelivered TRANSACTION_ERROR: 29201 [ 988.966398] binder: undelivered TRANSACTION_ERROR: 29201 18:33:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x300}, {r0, 0x20}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x2}, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$unix(0x1, 0x5, 0x0) 18:33:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) listen(r1, 0x0) fcntl$notify(r1, 0x402, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001900)={&(0x7f0000001700)=ANY=[@ANYBLOB="b6010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) r4 = getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x73, 0x0, r4}, {0x9, 0xff, 0xd0b3, 0xffffffffffffffff, 0xa00000, 0x8, 0x10001, 0xfffffffffffffffa}, {0xffffffff80000001, 0x929, 0x3, 0x2}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3500, 0x3, 0x3, 0x2, 0x8, 0x8, 0x8000}}, 0xe8) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:38 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) [ 989.016759] binder: 16513:16525 ioctl c0306201 20000040 returned -14 [ 989.054309] binder: 16517:16529 transaction failed 29201/-28, size 0-0 line 3255 18:33:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xa7cf04cbbcfb2050) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r2, 0x8, 0x6) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 18:33:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_DUMPABLE(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0x4, 0x0, {0x57, 0x2, 0xf31, {0x80000001, 0x32}, {0x20, 0x6}, @rumble={0x0, 0x81}}, {0x57, 0x5, 0x10001, {0x1, 0x3}, {0x81, 0xfffffffffffffffd}, @cond=[{0x100, 0x7, 0x1, 0xfffffffffffffffe, 0x2, 0x2}, {0x9, 0x6d216051, 0xffffffffffffffba, 0x3, 0x80, 0xfffffffffffffffa}]}}) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x20, 0x4, 0x3}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) [ 989.083762] binder: 16517:16529 ioctl 81009431 20000140 returned -22 [ 989.123178] binder: 16517:16529 transaction failed 29201/-28, size 0-0 line 3255 [ 989.143429] binder: 16517:16544 ioctl 81009431 20000140 returned -22 [ 989.150201] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.163902] binder: release 16538:16543 transaction 1518 out, still active 18:33:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x7fd) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x120) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:38 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1, 0x80) r6 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@xdp, &(0x7f0000000280)=0x80, 0x80800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x20000, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r10 = dup(0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r11 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) ioctl$FICLONE(r9, 0x40049409, r5) 18:33:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x121001, 0x100) r4 = dup3(r0, r0, 0x0) r5 = open(&(0x7f0000000440)='./file0\x00', 0x40000, 0x40) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x100, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000380)) r8 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x98018}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9651}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r9 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x16, 0x80800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) getsockopt$inet_tcp_int(r9, 0x6, 0x1b, &(0x7f0000000080), &(0x7f0000000180)=0x4) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x400100, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000240)={0x20, 0x19, 0xd, 0xb, 0x5, 0x4c5f4b6f, 0x1, 0xfd}) setrlimit(0xf, &(0x7f00000001c0)={0x0, 0x6}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:33:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) listen(r0, 0x1f) socket$netlink(0x10, 0x3, 0x8000000004) [ 989.163908] binder: unexpected work type, 4, not freed [ 989.163911] binder: undelivered TRANSACTION_COMPLETE [ 989.221863] binder: undelivered TRANSACTION_ERROR: 29201 18:33:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffe0, 0x4d, 0x2}, 0x15ce) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@buf={0x5e, &(0x7f00000000c0)="0a4459d54d789189ac51a16c460ae97fe548c8380a798ea0c25a523fd83f4af43a8f47418791c14155b6a2d74a0ec70c28f424a43a7e63e7fed4d2e31cfd3a379accd160044c9275ceb5379b1207050825f5679dc10b7abc10b287394322"}) 18:33:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2000000) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x334, r3, 0x118, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @loopback, 0x59f5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x9044}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_LINK={0x114, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc2a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfb40}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffff0710}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc7ce}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2e4fcd26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x689d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc09f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 18:33:38 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20080, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x1cf, 0x8, 0x4, 0xf1, 0x1c4, 0x6, 0x293, 0x81}, "6dabf7b0fe587e01c05a4fd5fd39f740236ce3ffb8db61e141fb4e3e5ded9aa66e38e51be7ad8b5fbb0222168e356d8c70d5ab869660df1e2f59601134355534dc942bfb95088044661703fb52e610700bf381d977e90e09d22fa476e485717cfd5c2bab6eb03ade92b43b78b50504ff731016299e505b4121b1df5884557eb9264674765e21d1aa9f500d7c2d788eff0b29843d2ac13cfd86917acf9cb7c14254d72c2da0e841158f78c64a38ae1231b0bec0b1ce9613811ea49e91aee2e8ad1dadc3bc17727460e0a56df5f89223", [[], [], [], []]}, 0x4ef) close(r1) 18:33:38 executing program 3: r0 = socket$inet(0x2, 0xf, 0x100) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 989.322487] binder: 16561:16570 transaction failed 29201/-22, size 0-0 line 3255 18:33:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire={0x40046305, 0x1}], 0xda, 0x0, &(0x7f0000000080)="6ba2710755e30f7e8fb22b6d35fedd9e152edf17b52c0a7e7a5b3f2eca224093eeed6ad8b56c848d6c481cc0c7b64278be36b0bdca8b0859bbe6fbbc72af5e73e1380e4ec99d36f1dc7bd90a1e6e0c1835ad55f0ac3e21cec7a7933f9b2592b44dac175f8b43c4ada2acb2c74571291323d9da946313d81a261e847bea86869c310b12b7011df8e8857c14e86d750d515212aca7c57961f891b77c8685adb7f9ccd1cce7c693ce1c5ebfe62d2c970bc6d885cb2b233e17bb32848ef4a0b775162ba8dd45631d34e6aa7de63ec35fccab4191c3dcdd43b1d52a66"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xf8, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r1}, @transaction={0x40406300, {0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x10, &(0x7f0000000200)=[@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x4, 0x35}], &(0x7f0000000240)=[0x38, 0x28]}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x2}], &(0x7f00000002c0)=[0x68, 0x38, 0x48, 0x20]}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x58, 0x38, &(0x7f00000003c0)=[@flat={0x77622a85, 0x100, r2, 0x1}, @flat={0x77622a85, 0x1, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x1}], &(0x7f0000000440)=[0x38, 0x68, 0x38, 0x48, 0x48, 0x78, 0x40]}, 0x7}}, @acquire_done={0x40106309, r4, 0x1}, @enter_looper], 0x28, 0x0, &(0x7f00000005c0)="f145f4761be7df27c82cefdf6e00e06de76f3bf6cf0c0fbb1730f1406c6427e594f4cf38e30c1d0c"}) 18:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @broadcast}, &(0x7f00000001c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @initdev, 0x0}, &(0x7f0000000300)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @initdev}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000740)={'nr0\x00', 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000002900)=[{{&(0x7f0000000780)=@ax25={{0x3, @bcast}, [@bcast, @default, @null, @bcast, @rose, @rose, @rose, @rose]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/15, 0xf}], 0x1, &(0x7f0000000880)=""/164, 0xa4}, 0xffff}, {{&(0x7f0000000940)=@xdp, 0x80, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f0000000ac0)=""/19, 0x13}, {&(0x7f0000000b00)=""/84, 0x54}, {&(0x7f0000000b80)=""/222, 0xde}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/150, 0x96}, {&(0x7f0000000e40)=""/173, 0xad}], 0x7, &(0x7f0000000f80)=""/82, 0x52}, 0x4}, {{&(0x7f0000001000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001080)=""/246, 0xf6}, {&(0x7f0000001180)=""/201, 0xc9}], 0x2, &(0x7f00000012c0)=""/152, 0x98}, 0x6ba6}, {{&(0x7f0000001380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/185, 0xb9}, {&(0x7f00000024c0)=""/97, 0x61}, {&(0x7f0000002540)=""/183, 0xb7}], 0x4, &(0x7f0000002640)=""/118, 0x76}, 0x400}, {{&(0x7f00000026c0)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002740)=""/152, 0x98}], 0x1, &(0x7f0000002840)=""/177, 0xb1}, 0x8}], 0x5, 0x0, &(0x7f0000002a40)={0x0, 0x989680}) r9 = getpgrp(0x0) ptrace$setopts(0x100000004200, r9, 0x8005, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002b40)={@empty, @initdev, 0x0}, &(0x7f0000002b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002c80)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000002cc0)={0x11, 0x0, 0x0}, &(0x7f0000002d00)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000002d40)={0x11, 0x0, 0x0}, &(0x7f0000002d80)=0x14) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x224, r14, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a3a}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd0ba}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbc6f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000007800)={0x0, @multicast2, @dev}, &(0x7f0000007840)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000007880)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000007980)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000007e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007e40)={&(0x7f0000003240)=ANY=[@ANYBLOB="2bf107defcde32c07f36a71843b80fc91000", @ANYRES16=r2, @ANYBLOB="21092bbd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="b400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r5, @ANYBLOB="a801020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400120b000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000500000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400b955000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="dc01020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400d90f000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400c70000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f69640000002be727c94c706cd5609800000000000000000000000000000000000000000008000300030000000800", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f69640000000000ec0000000000000000000000000000000000000800030003000001f9e9c3985a2236ed080004000600000008000600", @ANYRES32=r16], 0x464}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1163484000007f00000000000000000000000d00000000000100000000000000000000040000000000008000000000001a4f130000000500000000000000000000000000005baafb0bbb97e0ffffff"], 0x0, 0x0, 0x0}) 18:33:38 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 989.396532] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.423632] binder: release 16568:16584 transaction 1525 out, still active 18:33:38 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0)=[&(0x7f0000000100)=',*-\x00', &(0x7f0000000140)='\xd8ppp0\x00', &(0x7f0000000180)='/dev/binder#\x00', &(0x7f00000001c0)='posix_acl_access$+loppp0\x00', &(0x7f0000000280)='/dev/binder#\x00', &(0x7f00000002c0)='^\x14system\'vboxnet0-:eth0\xb5%-loem0\x00', &(0x7f0000000380)='/dev/binder#\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='%\'}posix_acl_access$proc\x00', &(0x7f00000004c0)='/dev/binder#\x00']) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x91, 0x9}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) creat(&(0x7f0000000540)='./file0\x00', 0x90) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 18:33:38 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x8000) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 989.460827] binder: 16590:16594 transaction failed 29201/-28, size 0-0 line 3255 18:33:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="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", 0x12b}], 0x1) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x2, 0x1d, 0x0, 0x4, 0x9, 0xe5d, 0x0, 0x146, 0xffffffffffffffff}) 18:33:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 989.483531] binder: unexpected work type, 4, not freed 18:33:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 989.483535] binder: undelivered TRANSACTION_COMPLETE 18:33:38 executing program 0: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 989.483597] binder: release 16568:16575 transaction 1522 out, still active [ 989.483601] binder: unexpected work type, 4, not freed 18:33:38 executing program 4: personality(0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 18:33:38 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400100, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getpeername(r0, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000dc0)=0xfffffffffffffc64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getpeername(r0, &(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@empty, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000640)={0x0, @broadcast, @multicast2}, &(0x7f0000000680)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000940)={@dev, 0x0}, &(0x7f0000000980)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000002480)={@rand_addr, 0x0}, &(0x7f00000024c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002540)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000006f40)=[{{&(0x7f0000002640)=@tipc=@id, 0x80, &(0x7f00000037c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/198, 0xc6}], 0x2, &(0x7f0000003800)=""/53, 0x35}, 0xffffffff}, {{&(0x7f0000003840)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004040)=[{&(0x7f00000038c0)=""/193, 0xc1}, {&(0x7f00000039c0)=""/188, 0xbc}, {&(0x7f0000003a80)=""/165, 0xa5}, {&(0x7f0000003b40)=""/243, 0xf3}, {&(0x7f0000003c40)=""/184, 0xb8}, {&(0x7f0000003d00)=""/123, 0x7b}, {&(0x7f0000003d80)=""/85, 0x55}, {&(0x7f0000003e00)=""/239, 0xef}, {&(0x7f0000003f00)=""/153, 0x99}, {&(0x7f0000003fc0)=""/96, 0x60}], 0xa, &(0x7f0000004100)=""/228, 0xe4}, 0x4}, {{&(0x7f0000004200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000004280)=""/160, 0xa0}, {&(0x7f0000004340)=""/147, 0x93}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/29, 0x1d}], 0x4, &(0x7f0000005480)=""/145, 0x91}, 0x81}, {{&(0x7f0000005540)=@pppol2tpin6, 0x80, &(0x7f0000005640)=[{&(0x7f00000055c0)=""/123, 0x7b}], 0x1, &(0x7f0000005680)=""/100, 0x64}}, {{&(0x7f0000005700)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005780)=""/240, 0xf0}, {&(0x7f0000005880)=""/45, 0x2d}, {&(0x7f00000058c0)=""/149, 0x95}], 0x3, &(0x7f00000059c0)=""/37, 0x25}}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000005a00)=""/99, 0x63}, {&(0x7f0000005a80)=""/111, 0x6f}, {&(0x7f0000005b00)=""/247, 0xf7}, {&(0x7f0000005c00)}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/96, 0x60}], 0x6, &(0x7f0000006d40)=""/119, 0x77}, 0xcb}, {{&(0x7f0000006dc0)=@pptp, 0x80, &(0x7f0000006e40), 0x0, &(0x7f0000006e80)=""/164, 0xa4}, 0x8}], 0x7, 0x40, &(0x7f0000007100)={0x0, 0x989680}) accept$packet(0xffffffffffffff9c, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007180)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r17, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="90010000", @ANYRES16=r1, @ANYBLOB="00032cbd7000fddbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="740102003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400830a000008000600", @ANYRES32=r12, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f74785f6861736a5f746f5f706f72745f6d617071696e670000000000000800030003000000533f3b37", @ANYRES32=r18, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004001e00000008000600", @ANYRES32=r4], 0x190}}, 0x4040044) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000007280)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000007380)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e00)={0x2a8, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x1c0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000d8c0)=[{{&(0x7f00000073c0)=@isdn, 0x80, &(0x7f0000007700)=[{&(0x7f0000007440)=""/9, 0x9}, {&(0x7f0000007480)=""/81, 0x51}, {&(0x7f0000007500)=""/219, 0xdb}, {&(0x7f0000007600)=""/238, 0xee}], 0x4, &(0x7f0000007740)=""/24, 0x18}, 0x8}, {{&(0x7f0000007780)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000008b00)=[{&(0x7f0000007800)}, {&(0x7f0000007840)=""/252, 0xfc}, {&(0x7f0000007940)=""/4096, 0x1000}, {&(0x7f0000008940)=""/129, 0x81}, {&(0x7f0000008a00)=""/224, 0xe0}], 0x5, &(0x7f0000008b80)=""/61, 0x3d}, 0x80000001}, {{&(0x7f0000008bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000008e00)=[{&(0x7f0000008c40)=""/142, 0x8e}, {&(0x7f0000008d00)=""/135, 0x87}, {&(0x7f0000008dc0)=""/32, 0x20}], 0x3, &(0x7f0000008e40)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000009e40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f000000b140)=[{&(0x7f0000009ec0)=""/35, 0x23}, {&(0x7f0000009f00)=""/48, 0x30}, {&(0x7f0000009f40)=""/173, 0xad}, {&(0x7f000000a000)=""/18, 0x12}, {&(0x7f000000a040)=""/226, 0xe2}, {&(0x7f000000a140)=""/4096, 0x1000}], 0x6, &(0x7f000000b1c0)=""/132, 0x84}, 0x3}, {{&(0x7f000000b280)=@alg, 0x80, &(0x7f000000b580)=[{&(0x7f000000b300)=""/141, 0x8d}, {&(0x7f000000b3c0)=""/53, 0x35}, {&(0x7f000000b400)=""/153, 0x99}, {&(0x7f000000b4c0)=""/100, 0x64}, {&(0x7f000000b540)=""/30, 0x1e}], 0x5}, 0x6baa}, {{&(0x7f000000b600)=@ax25={{0x3, @bcast}, [@remote, @remote, @bcast, @null, @rose, @default, @bcast, @rose]}, 0x80, &(0x7f000000b980)=[{&(0x7f000000b680)=""/32, 0x20}, {&(0x7f000000b6c0)=""/104, 0x68}, {&(0x7f000000b740)=""/90, 0x5a}, {&(0x7f000000b7c0)=""/228, 0xe4}, {&(0x7f000000b8c0)=""/144, 0x90}], 0x5, &(0x7f000000ba00)=""/55, 0x37}}, {{&(0x7f000000ba40)=@rc, 0x80, &(0x7f000000bb80)=[{&(0x7f000000bac0)=""/26, 0x1a}, {&(0x7f000000bb00)=""/123, 0x7b}], 0x2}, 0xa0}, {{&(0x7f000000bbc0)=@nfc, 0x80, &(0x7f000000bfc0)=[{&(0x7f000000bc40)=""/210, 0xd2}, {&(0x7f000000bd40)=""/69, 0x45}, {&(0x7f000000bdc0)=""/248, 0xf8}, {&(0x7f000000bec0)=""/49, 0x31}, {&(0x7f000000bf00)=""/191, 0xbf}], 0x5, &(0x7f000000c040)=""/172, 0xac}, 0x5}, {{&(0x7f000000c100)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000d400)=[{&(0x7f000000c180)=""/45, 0x2d}, {&(0x7f000000c1c0)=""/233, 0xe9}, {&(0x7f000000c2c0)=""/4096, 0x1000}, {&(0x7f000000d2c0)=""/50, 0x32}, {&(0x7f000000d300)=""/245, 0xf5}], 0x5, &(0x7f000000d480)=""/245, 0xf5}, 0x9a6}, {{&(0x7f000000d580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f000000d800)=[{&(0x7f000000d600)=""/98, 0x62}, {&(0x7f000000d680)=""/132, 0x84}, {&(0x7f000000d740)=""/76, 0x4c}, {&(0x7f000000d7c0)=""/57, 0x39}], 0x4, &(0x7f000000d840)=""/94, 0x5e}, 0xbf6}], 0xa, 0x2100, 0x0) r22 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r17, &(0x7f00000010c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x1c, r22, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f000000db40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000db80)=0x14, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000e240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104010}, 0xc, &(0x7f000000e200)={&(0x7f000000dbc0)={0x60c, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x1ac, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x1e0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x807}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8ed}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r24 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 989.483604] binder: undelivered TRANSACTION_COMPLETE [ 989.490320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=16598 comm=syz-executor.2 [ 989.494332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=16598 comm=syz-executor.2 [ 989.579510] binder: release 16604:16609 transaction 1529 out, still active [ 989.579515] binder: unexpected work type, 4, not freed [ 989.579518] binder: undelivered TRANSACTION_COMPLETE [ 989.579534] binder: release 16604:16617 transaction 1532 out, still active [ 989.579538] binder: undelivered TRANSACTION_COMPLETE [ 989.599663] binder: 16596:16603 got transaction to invalid handle [ 989.599674] binder: 16596:16603 transaction failed 29201/-22, size 36028797018963968-5434997645246464 line 3118 [ 989.710647] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.738749] binder: release 16631:16635 transaction 1534 out, still active [ 989.738755] binder: unexpected work type, 4, not freed [ 989.738758] binder: undelivered TRANSACTION_COMPLETE [ 989.738775] binder: release 16631:16640 transaction 1537 out, still active [ 989.738779] binder: undelivered TRANSACTION_COMPLETE 18:33:38 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/100, &(0x7f0000000180)=0x64) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2e) 18:33:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x101) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_GET_DUMPABLE(0x3) 18:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000140)) r2 = getgid() lchown(&(0x7f0000000000)='./file0\x00', r1, r2) 18:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000020000000000000001800000000c57a000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000000003e3313a52389320c458fa180ae00000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 18:33:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/63) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast1}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r3}) [ 989.807296] binder: 16590:16594 transaction failed 29201/-28, size 0-0 line 3255 [ 989.807351] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.820823] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.847048] binder: 16649:16653 transaction failed 29201/-22, size 0-0 line 3255 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0x1, 0x7, 0x7, 0x2, 0x0, 0x80, 0x26, 0x38, 0x396, 0x0, 0x6, 0x20, 0x1, 0x0, 0x8ce0, 0x100}, [{0x2, 0x3, 0x7, 0x6, 0x81, 0x5c, 0xffffffff, 0x2}, {0x7, 0x8, 0xcfe, 0x200000000000000, 0x8, 0x222, 0x80, 0x4}], "b1cff299ee71a682ff55195a3eed4bae057feb08767398320d240d913a968ef77898aac91edd9f0cd84d4d94800a53eaffe525532589afd92e16b61ca776878773b62409be8ecd7b35763ba5888bf9c7a0688f5b06a2f2d5410bd10f094eac2058b6970443fb43c4", [[], [], []]}, 0x3e0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:39 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r1, 0x0, 0xfffffffffffffff8}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha1-generic\x00'}}, &(0x7f00000001c0)="8513ffba97a78688511d8dd06a27c3a713", &(0x7f0000000200)="c5317012808d60acbdba795d11ee4350f0893a27b37ae66683c1f51328c2aa7b23847de8fd95a47aa3eb6c6a4bd02d167cf3ce9b6d2f4da7d8aa64e9ccf48bd6e1585b12b053110b664c2dcbde07beae7f8153d334778c58c4f7760c7ba67baf42d98b208d2cf442429fb540e81f9a7513b98ba9c761662931363abfe4ca4a98655cb35b4848d2fbd7dd21d68bc8d28a9a5af1025091738659e92098e9e7308864463e98390ac2dcd7654f7c82f8d8483857a7729ee70e2a3766a8ba24f18d0eed70929eeac7eddc19f3881775b9dc5f82af") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:39 executing program 2: socketpair(0x3, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000100)=0x1e) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xf8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 989.855392] binder_alloc: 6724: binder_alloc_buf size 18014408173158400 failed, no address space [ 989.855405] binder_alloc: allocated: 9624 (num: 504 largest: 32), free: 2664 (num: 1 largest: 2664) [ 989.855431] binder: 16651:16654 transaction failed 29201/-28, size 9007199254740992-9007208918417408 line 3255 18:33:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x400000) fstat(r0, &(0x7f0000000200)) unshare(0x14000000) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x31, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x3, {{0x2, 0x4e24, @broadcast}}}, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 989.856002] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.931962] binder: 16657:16664 transaction failed 29201/-28, size 0-0 line 3255 18:33:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xffffffff, @ipv4={[], [], @local}, 0x81}, {0xa, 0x4e24, 0xd9f, @loopback, 0x9}, 0x4d70, [0x749, 0x3, 0x3f, 0x8001, 0x7fff, 0x0, 0x40, 0x4]}, 0x5c) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 18:33:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./file0\x00', r1, r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) fremovexattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="51450600a6d196465073"]) [ 989.933187] binder: release 16660:16666 transaction 1545 out, still active [ 989.933192] binder: unexpected work type, 4, not freed [ 989.933195] binder: undelivered TRANSACTION_COMPLETE 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffec2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116300000000000000000001000000c95ffdd4522f5de41d00000000000000000000000000000000000000000000000000000000000000000000eebddde8c24ededa6f55c5729990a90715c38ae881bf673e42925d09a93d6331d04184f3ee8c58918154529e1cb7af0d9a1e036db4a6ace08ecd24926bd8731e14d938fb5d7e3a5eb06e95322b92f4f522e50000000000"], 0x0, 0x0, 0x0}) 18:33:39 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="71ee6293a9897d9b445b6df73ec8baa31ff11031ef1df0986b04420df55591bdafb684c1c25ce75f3cc45c", 0x2b, 0x20008881, &(0x7f0000000080)={0xa, 0x4e24, 0x7ff, @mcast2, 0xd161}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 989.933235] binder: release 16660:16665 transaction 1541 out, still active [ 989.933240] binder: unexpected work type, 4, not freed [ 989.933242] binder: undelivered TRANSACTION_COMPLETE [ 989.997961] binder: 16657:16664 transaction failed 29201/-28, size 0-0 line 3255 [ 990.023376] binder: release 16676:16683 transaction 1549 out, still active [ 990.023381] binder: unexpected work type, 4, not freed [ 990.023385] binder: undelivered TRANSACTION_COMPLETE [ 990.023507] binder: release 16676:16683 transaction 1552 out, still active [ 990.023512] binder: unexpected work type, 4, not freed [ 990.023515] binder: undelivered TRANSACTION_COMPLETE [ 990.049413] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.049442] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.103446] binder: 16694:16697 unknown command 25361 [ 990.103456] binder: 16694:16697 ioctl c0306201 20000440 returned -22 [ 990.110908] binder: release 16692:16699 transaction 1558 out, still active [ 990.110914] binder: unexpected work type, 4, not freed [ 990.110917] binder: undelivered TRANSACTION_COMPLETE [ 990.110957] binder: release 16692:16696 transaction 1555 out, still active [ 990.110962] binder: unexpected work type, 4, not freed [ 990.110965] binder: undelivered TRANSACTION_COMPLETE [ 990.220452] binder: 16649:16653 transaction failed 29201/-22, size 0-0 line 3255 18:33:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11bbd9e8634840000000000000000000000000000000000000f7000100000000000000000000000000000000000000ee000000000000000000000000008359a5a09e431ec523b60000000000000000"], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x20) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/17) 18:33:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) 18:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340754b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5fcff", 0xf1fbfa35c03127a1}], 0x1000000000000130) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080)=0x1000006, 0x1) inotify_init() 18:33:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x46) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x0) r4 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x3}, @acquire_done={0x40106309, r1}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x38, 0x28, &(0x7f0000000040)=[@flat={0x776a2a85, 0x100, r3, 0x4}, @fda={0x66646185, 0x9, 0x2, 0x15}], &(0x7f0000000080)=[0x18, 0x0, 0x68, 0x20, 0x68]}}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000140)=[@flat={0x77682a85, 0xb, r4, 0x4}], &(0x7f0000000180)=[0x68]}, 0x1000}}], 0xfb, 0x0, &(0x7f00000002c0)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r1) 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 990.220666] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.233856] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.261928] binder: 16706:16709 Acquire 1 refcount change on invalid ref 3 ret -22 [ 990.273002] binder: release 16708:16712 transaction 1565 out, still active 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={r2, r3/1000+10000}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000400000024795507f4d846613291dbdcc812ca08e8807c7053ae41c8975b0f32c0c539256735717a0a8815b1d80a0aeffe08293d0a0fc5c2b6701444a8f324532634970e79e51417a77bfe250e254dc87b35b3d495f7f496ef1a4c5d37118594de02a23a82c56fca65551661e2717f2b0a00c8ea3fb6ca04e7189d0e43d79fbd9d6a7ae6c154ab089e13fccf4aa7531eeee87de1aa4aff663576d8fa83a1f47641f2ab57a46d1893b50a52a597b80017e8f8c6a40aa92d8c926a46a06a931f080c"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 18:33:39 executing program 0: inotify_init1(0x80000) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$inet6_tcp(0xa, 0x1, 0x0) fsync(r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) unlink(&(0x7f0000000000)='./file0\x00') 18:33:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0xf6, 0xfff}, @window={0x3, 0xffff, 0xabf1}, @timestamp, @sack_perm, @timestamp, @sack_perm], 0x6) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 990.273008] binder: unexpected work type, 4, not freed [ 990.273011] binder: undelivered TRANSACTION_COMPLETE [ 990.273051] binder: release 16708:16711 transaction 1562 out, still active [ 990.273056] binder: unexpected work type, 4, not freed 18:33:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0x40}) 18:33:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000004000000000000000000000000000100000000000000000000000000000000220000000000000000000000000000000000000000000000000000fbffffffffffffff"], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x80000) getsockname$packet(0xffffffffffffff9c, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @initdev, @multicast1}, &(0x7f0000000800)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000840)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000940)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000a80)={@broadcast, @multicast1, 0x0}, &(0x7f0000000ac0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000c80)={@local, 0x0}, &(0x7f0000000cc0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000d40)={@loopback, 0x0}, &(0x7f0000000d80)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000001c0)={@remote, @multicast1, 0x0}, &(0x7f0000000e00)=0xffffffffffffff10) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000f00)={0x0, @local}, &(0x7f0000000f40)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0}, &(0x7f0000001180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008c80)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000008d80)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008e80)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000008f80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008fc0)={{{@in=@empty, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000090c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000009100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast2}}, &(0x7f0000009200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009300)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000009400)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000009440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000009480)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000094c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000095c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000009600)={{{@in6=@ipv4={[], [], @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000009700)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000009740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000097c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000098c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000009900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009940)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000a2c0)={&(0x7f0000000040), 0xc, &(0x7f000000a280)={&(0x7f0000009980)={0x8e8, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x240, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5af}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x8, 0x4, 0x81, 0x6}, {0x0, 0x7, 0x3f, 0x80}, {0x3, 0x3, 0x80, 0x9d9}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xb3d}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc63}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x240, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf1}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r20}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x7, 0xffffffffffff2fb3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffb}}}]}}, {{0x8, 0x1, r21}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x138, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff00000001}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x1000, 0x10000, 0x1}, {0x4, 0x6, 0x1, 0x21c1e76d}, {0x6, 0xfffffffffffffffe, 0x135b, 0x401}]}}}]}}, {{0x8, 0x1, r25}, {0x170, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x2, 0x0, 0x4, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8d}}, {0x8, 0x6, r28}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x404c001}, 0x8000) [ 990.273059] binder: undelivered TRANSACTION_COMPLETE 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x22b, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x3, {{0xa, 0x4e21, 0xfffffffffffffff7, @mcast1, 0x1}}}, 0x88) ioctl$RTC_AIE_OFF(r0, 0x7002) 18:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 990.311887] binder: 16706:16716 transaction failed 29201/-28, size 0-0 line 3255 [ 990.324785] binder: 16715:16719 unknown command -388383983 [ 990.324795] binder: 16715:16719 ioctl c0306201 20000440 returned -22 [ 990.327100] binder: 16715:16719 unknown command -388383983 [ 990.327109] binder: 16715:16719 ioctl c0306201 20000440 returned -22 [ 990.372527] binder: release 16722:16726 transaction 1569 out, still active [ 990.372533] binder: unexpected work type, 4, not freed [ 990.372536] binder: undelivered TRANSACTION_COMPLETE [ 990.373088] binder: release 16722:16727 transaction 1572 out, still active [ 990.373094] binder: unexpected work type, 4, not freed [ 990.373097] binder: undelivered TRANSACTION_COMPLETE [ 990.440324] binder: 16736:16740 unknown command 0 [ 990.440334] binder: 16736:16740 ioctl c0306201 20000440 returned -22 [ 990.441331] binder: 16732:16739 transaction failed 29201/-22, size 37383395344384-0 line 3255 [ 990.443786] binder: release 16736:16740 transaction 1575 out, still active [ 990.443822] binder: unexpected work type, 4, not freed [ 990.443825] binder: undelivered TRANSACTION_COMPLETE [ 990.487230] binder: 16732:16739 transaction failed 29201/-22, size 37383395344384-0 line 3255 [ 990.498579] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.498607] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.614751] binder: 16706:16709 BC_ACQUIRE_DONE u0000000000000000 no match [ 990.621794] binder: 16706:16709 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 990.629548] binder: 16706:16709 BC_FREE_BUFFER u0000000000000000 no match [ 990.645957] binder: 16706:16709 got reply transaction with no transaction stack [ 990.653464] binder: 16706:16709 transaction failed 29201/-71, size 56-40 line 3026 [ 990.664194] binder: 16706:16709 Acquire 1 refcount change on invalid ref 3 ret -22 [ 990.664244] binder: 16706:16716 transaction failed 29201/-28, size 0-0 line 3255 [ 990.664584] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.685390] binder: 16706:16709 BC_ACQUIRE_DONE u0000000000000000 no match [ 990.692544] binder: 16706:16709 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 990.700283] binder: 16706:16709 BC_FREE_BUFFER u0000000000000000 no match [ 990.707275] binder: 16706:16709 got reply transaction with no transaction stack 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) 18:33:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000003f3a670c3eff5d8d8400000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4002, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x81, 0x8, 0x1}) 18:33:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) sendto$packet(r1, &(0x7f0000000500)="5d9ce22fca963fb7058425091c", 0xd, 0x4008080, &(0x7f0000000740)={0x11, 0x10, r3, 0x1, 0x100, 0x6, @random="53fbf17b4d2c"}, 0x14) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {0xc5, 0x4, 0x8, 0x6475}, 0x11, [0x9, 0x36be, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x5, 0x800, 0xd54f, 0x6, 0x80, 0x2, 0x1ff, 0xfac8, 0x1, 0x3f, 0x5, 0x400, 0x2, 0x1, 0xfffffffffffffffa, 0x3, 0x8, 0xdf7, 0xf784, 0x6, 0x8, 0x8, 0xff, 0x8, 0x401, 0x9, 0x3, 0xffff, 0xa000000000, 0x6, 0x3, 0x0, 0x9, 0x80, 0xfde4, 0x4d6b06c, 0x8, 0x800080, 0xb90, 0x0, 0x3, 0x6, 0x1, 0x1, 0x8, 0x8, 0x7, 0x0, 0x2, 0x8, 0x3, 0x1000, 0xbf94, 0xe6, 0x5, 0x7], [0x8, 0x7ff, 0x6, 0x80000000, 0x0, 0xc570, 0x80000000, 0x5, 0x3ffba659, 0x81, 0x7, 0x2, 0xffff, 0x1, 0x80000001, 0x9, 0x6, 0x80000001, 0x7fff, 0xbb2, 0x2, 0x6, 0x1, 0x4, 0x9, 0x3, 0x8, 0x4, 0x8, 0x4, 0x973, 0x8, 0x2, 0x3, 0x5d51, 0x9, 0x0, 0x5, 0xdffffffffffffffe, 0x8, 0x10000, 0x0, 0xffffffff, 0x3, 0x3, 0x7f, 0x2, 0x909, 0x1000, 0x80, 0xaf, 0x9, 0x40, 0x8, 0x1, 0xffffffff, 0x0, 0xd3, 0x81, 0x7, 0x8, 0xfffffffffffffff9, 0xa28, 0x1], [0x1, 0x8000, 0x9f, 0x100000000, 0x5, 0x0, 0x3, 0x80000000, 0x6, 0x4, 0x7, 0x2, 0x9, 0x7eb, 0x80000000, 0x80000000, 0x5155, 0x7, 0x0, 0x200, 0x80000000, 0x2, 0x7, 0xf, 0x5, 0x7f, 0x6, 0x80000000, 0xbc1, 0x9, 0x0, 0x4, 0x5, 0x4, 0x101, 0x8001, 0x100, 0x401, 0xffffffffffffffe6, 0x620, 0x8, 0x5, 0xff, 0x1, 0x3, 0x8, 0x3, 0x10001, 0x9a, 0x2, 0x7, 0x0, 0x20, 0x1, 0x8, 0x200, 0x2, 0xd3, 0x7, 0x6, 0x0, 0xe3, 0x1, 0x40], [0xda, 0x66, 0x0, 0x3, 0xb6a, 0x0, 0x80000000, 0x7, 0x1, 0xfffffffffffffb33, 0x5, 0x7, 0x8001, 0x20, 0x4, 0x6, 0x8000, 0x3, 0x9, 0xfffffffffffffffb, 0x1, 0x4, 0xffffffffffffff96, 0x2, 0x1000, 0xa676, 0xc3, 0x6, 0x280000000000000, 0x7, 0x2, 0x81, 0x8, 0x1, 0x0, 0x401, 0x7f, 0x3, 0x6, 0x7, 0x3, 0xc000000, 0x8000, 0x0, 0xb3, 0x146eecf4, 0x400, 0x1, 0x7, 0x80, 0x4, 0x4, 0x40, 0x1f, 0x5, 0x0, 0x2, 0x2, 0x80000000, 0x0, 0x1, 0x9, 0x200000000000000, 0x3]}, 0x45c) 18:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0600f71ef35e45b756e070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:39 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x70675dc4162ceced, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000400000000000000fbffffffffffffff173be16844fb0ef14374d86bc26e5fc45bc2be22415b27a4ec6dfa6b44a5a4406d536f97ce467713b676a39d4706154c042984ed71cf8d934ce22a37bfa2f403b6"], 0x0, 0x0, 0x0}) ioctl$void(r1, 0x5450) [ 990.714793] binder: 16706:16709 transaction failed 29201/-71, size 56-40 line 3026 [ 990.722639] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.750796] binder: 16755:16759 transaction failed 29201/-22, size 0-0 line 3255 18:33:39 executing program 4: setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:semanage_store_t:s0\x00', 0x26, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) ptrace$setregs(0xf, r1, 0x3, &(0x7f00000001c0)="d35f1d6807a320694da33cb0") r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x1, @tid=r1}, &(0x7f0000000100)=0x0) timer_getoverrun(r3) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 18:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x80000000810) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 990.781447] binder: release 16753:16758 transaction 1587 out, still active [ 990.789679] binder: 16755:16759 transaction failed 29201/-22, size 0-0 line 3255 [ 990.802270] binder: unexpected work type, 4, not freed [ 990.802273] binder: undelivered TRANSACTION_COMPLETE 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11000000000000000000001000000000000000b316000000000000000000000000000000000000000008000000000000000000f3ffffff000000000000000000000000000000000000000000e4ae1a69a385296552b864dd7fe2b10df3db4e61ddc6b3bf851a92b8a134fbdff967c39769f1789b711b8a2c4cd60c4bcca57d5ec9c99a6f563711b7262dd626d57cf1b6e0d772646b1ea4c74fcce6aa89232083cbd90b02ab7b1ea0888feddd5b2a3485b8bd29f9f7b3cbe94ed5c63790c9e842eefb34"], 0x0, 0x0, 0x0}) 18:33:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x4, 0x1, 0xfffffffffffffffb, r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = accept4(r0, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x800) sendto$inet6(r1, &(0x7f00000001c0)="1b41071df4808995745a3abb7ba928b88a03db26104a1d05b8c67c9c58bdf8f475a9ba634b9b8eee3ae261427cefaeb36a39f44b11f5b2feeaecffe49c6671fad1dbcf85a691033894f2f4fb4b76208baf0f0efd555f4497a536f59904b627e0e2aa5a7e7a4fa6834751b19611f1952524642a77cc65eae8df99fa4cb322363f3add2fdea29e9cc32a301209ed376b9b556525f812580f26031d9c9add18ced1df8b5d3066ae2aae7905de40aba125d9794fefbea627b0eb7d39d2f3248aa93682d87ea2de4addf37b25a067562c2b77cbb7b71e1b17d8a5bca9f06beb9078271a75916d", 0xe4, 0x40040, &(0x7f00000002c0)={0xa, 0x4e23, 0x8, @local, 0xad}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) clock_nanosleep(0x6, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) [ 990.802315] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.802337] binder: release 16753:16758 transaction 1584 out, still active [ 990.802340] binder: unexpected work type, 4, not freed 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 990.802343] binder: undelivered TRANSACTION_COMPLETE [ 990.825690] binder: 16764:16769 transaction failed 29189/-22, size 0-0 line 3118 [ 990.830646] binder: 16764:16769 transaction failed 29189/-22, size 0-0 line 3118 [ 990.837815] binder: undelivered TRANSACTION_ERROR: 29189 [ 990.837850] binder: undelivered TRANSACTION_ERROR: 29189 [ 990.885634] binder: 16776:16780 transaction failed 29189/-22, size 24-8 line 3118 [ 990.890179] binder: undelivered TRANSACTION_ERROR: 29189 [ 990.937278] binder: 16783:16789 unknown command 17 [ 990.937287] binder: 16783:16789 ioctl c0306201 20000440 returned -22 [ 990.963657] binder: 16787:16792 ioctl 8903 20000000 returned -22 [ 990.965530] binder: 16787:16792 ioctl 8903 20000000 returned -22 [ 990.966397] binder: release 16787:16792 transaction 1594 out, still active 18:33:40 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x13, 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RWALK(r2, &(0x7f0000000180)={0x30, 0x6f, 0x1, {0x3, [{0x40, 0x2, 0x6}, {0x4, 0x0, 0x7}, {0x8, 0x2, 0x3}]}}, 0x30) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 2: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf={0x7a, &(0x7f0000000240)="cca28aeda19ac2a154c006fcf5b637b0f4e80500bb1c047a093d484c0ecc4f343487ae8f932206eab2efd6e0d485058cf269439feb96b5aa3af5d8225832d180aaf746384dd846b9650045556a595f7fd99e04de4e2e15cbb9bc56d07676a576b80aa3fd442c6cced09bd8b3e71c97bdb6886e0b59a96887d61a"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) futimesat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) listen(r2, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e22, @empty}}) [ 990.966402] binder: unexpected work type, 4, not freed [ 990.966405] binder: undelivered TRANSACTION_COMPLETE [ 991.064959] binder: undelivered TRANSACTION_ERROR: 29201 18:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffb}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x200, 0x7ff, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x53c}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="45916b4000363447", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 991.096629] binder: 16799:16806 transaction failed 29189/-22, size 0-0 line 3118 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 18:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) [ 991.153416] binder: undelivered TRANSACTION_ERROR: 29189 [ 991.183599] binder: 16816:16820 transaction failed 29201/-22, size 0-0 line 3255 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x7ff) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1c140, 0x18) io_setup(0xcd3, &(0x7f0000000240)=0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xf, 0x1, r2, &(0x7f0000000280)="3ab685d3d21f0fe646db13a605a43e7612e1768036518374f3a570f0e40250fd", 0x20, 0x9, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000300)) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x32c, 0x0, 0x2, 0x300, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@nested={0x10, 0x2, [@typed={0xc, 0x42, @u64=0xe9}]}, @typed={0x8, 0x2a, @ipv4=@remote}, @nested={0x2b0, 0x22, [@generic="e3cd9b5526656643b479da838fed8ea4977e6a41927fd2caf5d0ad37ed314d64f982113aea4e2fda5b82e6f759b2afab364451b5ce2b2fdcccde554efe5e775860f41b30a13d833f544635bd2e29615884033d37a073447cceab5a85f75ce9e2e3ce11a257f9a4a27e42d3a5dfd433f15a2b3af2ffe4b6427a05fb75e0bf58536650f61666cb1dd846c731b17fc368051ca78e52783400c17e83d1766803434535fc135704", @typed={0x14, 0xd, @str='/dev/binder#\x00'}, @typed={0x8, 0x6d, @ipv4=@empty}, @generic, @generic="b40ca31bd2c8ee7d868579ff94df9d70a7e5a59c8d1f240507605565ec65447d53207b60ee120fc516530bfde1754973fb6554f6db2c025b5ee9c8930a1f87fad0336813b9a23d20be1f0562a53caa35e5d08bcf39d7aef397354ea4ed", @generic="3b07b5d89e482eb89836c340815118cae5ebf03c105cc8d537c4586efe7c4c2c2005c7215cd7eea892ee24163bf4ec3041e01bee16013ac7de74330342574aaefbb5bf6176165ee1ded7687d9ccfd56541e24ad846df2a9c1e1f14317ebf6f05efe0ea063df35aebc6372ecda7d8dff11cb2ad59bf035ac7cf806c01cbd8c028fa8aaf97fe488c3823637b9cf0ae1e", @typed={0xc, 0x24, @u64=0x9}, @generic="adfe80175343e3e108f772281a2c706851c8bf19ddaa6fc3eef7e3513119e29c784aacfe0d96f66cdcc652de9faf8b571025c52d7e26c5f3776600e5df67da853fbd1609f3620cc2afb876efd0f780f6ed35e320506864d05f0411e89638dc9bda3a5cb5fcc3dbbdb1fedc30ae72a9cfaf85b3ed49124165c5905ae61731724de54f93eac1e0f88085c0a3dcbf2b4f064d711930e1ef2826d5b101c9f908904156a7465fa290dcbd57cc03d89ac0c28b407a888a5747c495cf0f24cd761ee00f5090122433c9c622f5d0cec068c21124d41a10c6d21b49a8ea25ae872e9bf40f935a36ecae053818f6f9e2c485ce16f7c9"]}, @generic="65a9a312307f4d5e80bebfc02ddf2416914572e66fb6e4500aab0e16f092b5c391593e58c1c750c68f6b22", @generic="e69860a4dc2142b15fe96ed9a83415ac4a6d7d91676cd4df0997139bc3", @typed={0x8, 0x4, @ipv4=@multicast2}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20040090) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYBLOB="0200000000000000b2ecf19716b37600a13cac5a4b79355d4ace14dab5eeea2186b1e0e6cbc14e0e4e8478a1269b478da12a13009df6f5163cd3a38113b276c2d7a7d4706b383663fe870db452ed1399ad68e8d8d2276f907655a7e0ec25c9cfdb7ecbb52bbfed"], 0x27e, 0x0, 0x0}) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340), 0x4) 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x5, 0x7d0, [0x0, 0x200005c0, 0x20000930, 0x20000c28], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x55, 0xffff, 'bridge0\x00', 'ip6gre0\x00', 'ifb0\x00', 'rose0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7ff, 'syz1\x00', 0x9}}}}, {{{0x5, 0x1, 0x6006, 'bpq0\x00', 'yam0\x00', 'veth1_to_team\x00', 'ip6tnl0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xa8, 0x208, 0x280, [@cluster={'cluster\x00', 0x10, {{0x0, 0x563f, 0x0, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2, 'system_u:object_r:hostname_exec_t:s0\x00'}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x81, 0x9, 0x7ff, 0x0, 0x0, "65d3a7561cb0f646793cce81690c0ebc104b8575e391ab1d4efa1fb524a8aa01defd311397e9742ea9f37f2e56565c43ec17adf75557eee9ee3742bd07b28fb9"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x13, 0x20, 0x601f, 'bond_slave_0\x00', 'batadv0\x00', 'team0\x00', 'veth1_to_team\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x27}, [0x0, 0xff, 0x0, 0x0, 0xff], 0xf0, 0x120, 0x168, [@connbytes={'connbytes\x00', 0x18, {{0x0, 0x3, 0x3, 0x2}}}, @time={'time\x00', 0x18, {{0x1f, 0x0, 0x1515e, 0xe630, 0x1, 0x3f, 0x1}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0xfff, 0x6}}}}, {{{0x5, 0x2, 0x88f7, 'netdevsim0\x00', 'bond_slave_1\x00', 'vxcan1\x00', 'veth0_to_bridge\x00', @dev={[], 0xc}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0x70dd5db05ac37e0], 0xe8, 0xe8, 0x160, [@ip6={'ip6\x00', 0x50, {{@rand_addr="814920d551d284193a6a370c2e6f5b48", @loopback, [0xffffffff, 0xffffffff, 0x499409263298e2a6, 0xff000000], [0xff0000ff, 0xffffffff, 0xffffffff, 0xffffffff], 0x38, 0x87, 0x4, 0x60, 0x4e21, 0x4e20, 0x4e24, 0x4e21}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x81, 0x0, 0x1, 0x0, "4301cafc4dcf9aeb8fde9f1512feb6c5d0f2f113c09d0864016525d79aad180b824653a15561b2e6a4235dcc2ac01cc9a9c16dd69d8a6b5b809c113aa775fa1e"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{{{0x5, 0x10, 0x62ff, 'eql\x00', 'veth1_to_team\x00', 'veth1_to_bond\x00', 'gretap0\x00', @dev={[], 0x15}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa0, 0x108, 0x138, [@cgroup0={'cgroup\x00', 0x8, {{0x3ff}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xff}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0xc}}}}]}, @common=@STANDARD={'\x00', 0x8}}]}]}, 0x848) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000400)=0x90) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in=@multicast1, 0x4e20, 0xffff, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0x2b, r2, r4}, {0x8, 0x7, 0x80000000, 0x7, 0xffffffff80000000, 0x75, 0x9, 0x100000001}, {0x9, 0x7, 0x1e, 0x1}, 0x2, 0x6e6bbd, 0x3, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x34ff, 0x7, 0x1, 0x0, 0x1, 0x2000200000, 0x9}}, 0xe8) [ 991.185578] binder: 16818:16823 got transaction with invalid offset (0, min 0 max 24) or object. 18:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11961bd8446dce65634840000000000000001000000000000000000000000001000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$P9_RREAD(r1, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x100b) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair(0x3, 0x4, 0x7ff, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r2, &(0x7f0000001100), &(0x7f0000001140)=0x1c) 18:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0088000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x270, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffffffffff7, @rand_addr="c9925b42c544beecfb13cd3b5694bc26", 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x489}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34b9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3cc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffe00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) [ 991.185606] binder: 16818:16823 transaction failed 29201/-22, size 24-8 line 3349 [ 991.188418] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.244114] binder: 16827:16832 transaction failed 29201/-28, size 0-0 line 3255 [ 991.248558] binder: 16827:16832 transaction failed 29201/-28, size 0-0 line 3255 [ 991.255463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=16825 comm=syz-executor.2 [ 991.258272] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.258389] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.341493] binder: 16843:16847 unknown command -669280751 [ 991.341503] binder: 16843:16847 ioctl c0306201 20000440 returned -22 [ 991.392497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=16850 comm=syz-executor.2 [ 991.399911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=16856 comm=syz-executor.2 18:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) r4 = getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x73, 0x0, r4}, {0x9, 0xff, 0xd0b3, 0xffffffffffffffff, 0xa00000, 0x8, 0x10001, 0xfffffffffffffffa}, {0xffffffff80000001, 0x929, 0x3, 0x2}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3500, 0x3, 0x3, 0x2, 0x8, 0x8, 0x8000}}, 0xe8) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x210040, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@remote, 0x6, r2}) 18:33:40 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x81, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) 18:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'lapb0\x00', {0x2, 0x4e21, @loopback}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x16) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 991.446805] binder: 16816:16858 transaction failed 29201/-22, size 0-0 line 3255 [ 991.454908] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.460679] binder: undelivered TRANSACTION_ERROR: 29201 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="a9f25a1cf90beb2eb4e53a11373b78fc29cd1daffcb905f29e870000000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r1, 0x6, 0x1, 0x6, &(0x7f00000002c0)=[0x0], 0x1}, 0x20) r2 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/binder#\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r2, 0x240000000000000, 0x4}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'streebog256-generic\x00'}}, &(0x7f00000001c0)="e091b055ca985769bcce3264da8beb1104967f1ccc3ee8c38830fe5aaacf6223d5b9aec3afa32d21efd3a1eb325c18bb546e", &(0x7f0000000200)=""/155) [ 991.503102] binder: release 16863:16868 transaction 1606 out, still active [ 991.514734] binder: unexpected work type, 4, not freed [ 991.518526] binder: 16862:16866 transaction failed 29201/-28, size 0-0 line 3255 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) 18:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fcntl$getflags(r0, 0x401) 18:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) r4 = getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x73, 0x0, r4}, {0x9, 0xff, 0xd0b3, 0xffffffffffffffff, 0xa00000, 0x8, 0x10001, 0xfffffffffffffffa}, {0xffffffff80000001, 0x929, 0x3, 0x2}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3500, 0x3, 0x3, 0x2, 0x8, 0x8, 0x8000}}, 0xe8) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 991.528261] binder: 16862:16872 transaction failed 29201/-28, size 0-0 line 3255 [ 991.594343] binder: undelivered TRANSACTION_COMPLETE 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x34) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@local, 0x11, r3}) 18:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) r4 = getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x73, 0x0, r4}, {0x9, 0xff, 0xd0b3, 0xffffffffffffffff, 0xa00000, 0x8, 0x10001, 0xfffffffffffffffa}, {0xffffffff80000001, 0x929, 0x3, 0x2}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3500, 0x3, 0x3, 0x2, 0x8, 0x8, 0x8000}}, 0xe8) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 0: r0 = getpid() openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/load\x00', 0x2, 0x0) sched_getscheduler(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x40080, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x101, 0xfffffffffffffffc, 0x4, 0x1f, 0x0, 0x800000000000100, 0x40000, 0x4, 0x9, 0x1, 0x1, 0x44b3498f, 0x5b6, 0x9, 0x4, 0x1, 0x9, 0x100, 0x10000007, 0x100000000, 0x648, 0x4, 0xfffffffffffffffb, 0x80000000, 0x6, 0x400, 0xec2f, 0x2, 0x1, 0x95, 0x3e, 0x3, 0xffffffffffffc222, 0x1, 0x0, 0x6, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000003c0), 0x2}, 0x21001, 0x5, 0xffffffffffffffc1, 0x7, 0x5, 0x1, 0xc9ea}, r0, 0x1, r1, 0x8) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400200, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10050, r3, 0x39) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) quotactl(0x9, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000300)="43625e2112ed962afae0314856e4611cd33119ffe5b66e0c159bf6631c99f0392a3153a3b04a4b01f111a44cdc1d18fd465322245ab286d86c24b59eabf63560691d7fae1a6d2f4d8fb23780ce42885eda67534f528fddcccfaef81509eae31b4bcde0b02eb1a9799849dfffbc244982b212dc9ebc64d75d9d3d4c78ce3cf3d6d5207a379e6ae7cb076f870f56ce306d082323552746cac91259cb3ea79857fd7772ab9856e4b0312e72cc93b15ea465808e4d8578da897e260d5c3586b394") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r3, 0x0, 0x1, &(0x7f0000000080)='\x00', r5}, 0x30) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000400)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000540)) 18:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="c6c8f74898128d26"]], 0x0, 0x0, 0x0}) [ 991.627216] binder: release 16864:16873 transaction 1611 out, still active [ 991.647007] binder: 16885:16891 transaction failed 29201/-28, size 0-0 line 3255 18:33:40 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="220000003702000308000000000000000400000000000000", @ANYRES32=r1, @ANYBLOB='eb'], 0x22) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 991.685166] binder: unexpected work type, 4, not freed 18:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) r4 = getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x73, 0x0, r4}, {0x9, 0xff, 0xd0b3, 0xffffffffffffffff, 0xa00000, 0x8, 0x10001, 0xfffffffffffffffa}, {0xffffffff80000001, 0x929, 0x3, 0x2}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3500, 0x3, 0x3, 0x2, 0x8, 0x8, 0x8000}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) setreuid(r1, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x149001, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x5, 0x2, 0x3, 0xff, 0x0, 0x10000, 0x100, 0x8, 0xfffffffffffffffc, 0x3, 0x800, 0x0, 0x6, 0x3, 0x7, 0x3, 0x8000, 0x28e, 0x8f, 0x3f, 0x0, 0x2, 0x1, 0x9, 0x8, 0x5, 0x2, 0x8, 0x3, 0x80, 0x3, 0x1, 0x0, 0x2, 0x5, 0x401, 0x0, 0x8000, 0x1, @perf_config_ext={0x0, 0x101}, 0xa000, 0x37b, 0x9, 0x0, 0x2ebe76ea, 0x8, 0x1}, r3, 0xf, r4, 0xa) [ 991.685170] binder: undelivered TRANSACTION_COMPLETE 18:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 991.685292] binder: release 16883:16887 transaction 1614 out, still active [ 991.685297] binder: unexpected work type, 4, not freed [ 991.685300] binder: undelivered TRANSACTION_COMPLETE [ 991.685364] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.685387] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.685452] binder: release 16863:16868 transaction 1603 out, still active [ 991.685456] binder: unexpected work type, 4, not freed [ 991.685458] binder: undelivered TRANSACTION_COMPLETE [ 991.708202] binder: release 16896:16901 transaction 1618 out, still active [ 991.708207] binder: unexpected work type, 4, not freed [ 991.708210] binder: undelivered TRANSACTION_COMPLETE [ 991.775904] binder: 16907:16915 unknown command 33554435 [ 991.775913] binder: 16907:16915 ioctl c0306201 20000440 returned -22 [ 991.801977] binder: release 16914:16918 transaction 1621 out, still active [ 991.801984] binder: unexpected work type, 4, not freed [ 991.801992] binder: undelivered TRANSACTION_COMPLETE 18:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x7, 0x1ff, 0x40, 0x8, 0x0, 0x8, 0x100, 0x8, 0x0, 0xbdd, 0x7fffffff, 0x760000000000000, 0x4, 0x2, 0xff, 0x1, 0xfffffffffffffff7, 0x6, 0x8, 0x100000000, 0x9, 0x1000, 0x81, 0x1, 0xfffffffffffffff8, 0x80000000, 0x8, 0x8, 0x7f, 0xbc9, 0x5, 0x35, 0x1f, 0x6, 0x1f, 0xc1e, 0x0, 0x6000000000000, 0x5, @perf_bp={&(0x7f0000000140), 0x1}, 0x2020, 0x4, 0x6, 0x7, 0x68c9, 0x1ff, 0x7}, r1, 0xe, r2, 0x1) r3 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x2110, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffdd4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\tc*@', @ANYRES64=r3, @ANYBLOB="0300"], 0x0, 0x0, 0x0}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000240)={0x6, 0x2}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000100)) openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 18:33:41 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) r4 = getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x73, 0x0, r4}, {0x9, 0xff, 0xd0b3, 0xffffffffffffffff, 0xa00000, 0x8, 0x10001, 0xfffffffffffffffa}, {0xffffffff80000001, 0x929, 0x3, 0x2}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={[], [], @remote}, 0x3500, 0x3, 0x3, 0x2, 0x8, 0x8, 0x8000}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x800, 0x0) listen(r1, 0x3000000) r2 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="c2b2a149187c0ea6e9b50cd99d115d02908276", 0x13, 0xfffffffffffffffb) keyctl$update(0x2, r2, &(0x7f00000001c0)="da58df582438cc74e8601a0cbd53f81b4e5226ba587b5b0242125b00d27303babfb6c8770837f096fd2ca00bfe5225bff18fb890bf7f89145d2ac6a8f4a008cb848ddf45b7f81d54eac0c4108e3cc303a788cd9307f348c0d39af42718f53b173d1cfc427c42b40291abd7d4133c6d59a80ba32502350716bb8a28c8579891689854d3d7679af64efdf9ba180fb8", 0x8e) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @empty}, &(0x7f0000000080)=0xc) socket$netlink(0x10, 0x3, 0x8000000004) [ 991.807060] binder: 16907:16915 unknown command 33554437 [ 991.807079] binder: 16907:16915 ioctl c0306201 20000440 returned -22 [ 991.941477] binder: 16885:16891 transaction failed 29201/-28, size 0-0 line 3255 [ 991.941710] binder: undelivered TRANSACTION_ERROR: 29201 [ 991.954796] binder: undelivered TRANSACTION_ERROR: 29201 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) getuid() write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xfffffffffffffff8, 0x1f, 0xffffffffffffff01, 0x2, 0x6, 0x6, 0x1f, 0x40, 0x295, 0x5, 0x5, 0x38, 0x2, 0x6, 0x480000000000, 0x9}, [{0x7, 0x8, 0x1000, 0x0, 0x100000000, 0x8, 0x6, 0x6}], "3f9ba67d57c2d057dbf4e6b05e0ef37b8ccceea577478a1d91b8f70d85ab0577c9e8f0a293d818f1a3cbe4107f138fbb2c55a883d2a0416d8c6d2d538fb51fc9809af4d30ce4a2efcf08f13e250ed494915ee79770b08baaefbba5cd3d529178931e84d8c841bc76a496e43d4dc150daafdb4046c97bbb08671f7d44e7b31edfcf350c753feb438d55366ba5564c77a09af89da2c71b2bc7e3538da81a5d70727b46dc508abe2b29f7547a2ec483dbe795272209f9c01c38f10d677909d172d1e7a0a5c0af00c965b7f14e42e7a32d21ae569e739b47a2d3323eb2def269627a474a2c2d0186db6f035051b00f9d8a063be98e54a8", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) prctl$PR_SET_FPEXC(0xc, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4842000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa564}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x4014) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @rand_addr=0x1000}, 0x80, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='irlan0\x00', 0x3, 0x8, 0x5bb}) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 991.992129] binder: release 16928:16934 transaction 1625 out, still active [ 992.000221] binder: unexpected work type, 4, not freed [ 992.046194] binder: undelivered TRANSACTION_COMPLETE 18:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00', 0x400}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fstat(r0, &(0x7f0000000080)) 18:33:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2c000000040000001b0000000000000002000000000000000000000000000000040000000000000000000000f8780e9f66f262c3fa1164bb2b281fd9b13e583589ba2f0d8a0ac6b37a45bc13f7c7b753d4193b99da"], 0x2c) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) getuid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'security.', '/dev/binder#\x00'}, &(0x7f0000000080)='cpuset\x00', 0x7, 0x3) [ 992.077896] binder: release 16943:16949 transaction 1631 out, still active 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 992.128342] binder: unexpected work type, 4, not freed 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_execute_func(&(0x7f00000000c0)="c401797f35dffd5a08c403c50d74d90a00c4e2e5bdc9c4434148f52fc442fd41af00000000c4c24d09e3c4618fd01fc40239ac2fc4835d1870320cf30faea7b20f5561") r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 18:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff36, 0x0, 0x0}) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r1, 0x0, 0x8, 0x1000, &(0x7f0000000080)="b9c804690bde4e28", &(0x7f00000000c0)=""/4096, 0x10000}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2, 0x0) write$P9_RWRITE(r2, &(0x7f00000001c0)={0xb, 0x77, 0x1, 0x2}, 0xb) ioctl$RTC_WIE_OFF(r2, 0x7010) listen(r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') write$P9_RREADLINK(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="ff000000176c6530"], 0x10) r4 = socket$netlink(0x10, 0x3, 0xb) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x8b) unlink(&(0x7f0000000040)='\x00') 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) fallocate(r2, 0x3, 0xc000, 0x8000fff5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x212800, 0x0) write$tun(r1, &(0x7f0000000480)={@val={0x0, 0x8edd}, @void, @eth={@broadcast, @random="6d0dc077b7f0", [], {@generic={0x0, "8a76aa78a244e513852689684d8426fbcc3a21c39574317f7c74e55b8b4a8428ed89c9e08c87e509bb569dde2349a524124b2446df3b2e2a7707a491d4907ecccd6a789ac9944f22d488b8002c92ead6aa8a4f1349f13bb08a4795cdc729621aec3d37c556ea68afbe1b9924dbe9c76bfa85ea71fb71"}}}}, 0x88) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000580)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) r6 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x21012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x120, 0x0, &(0x7f00000002c0)=[@release, @increfs_done={0x40106308, r3, 0x1}, @reply_sg={0x40486312, {{0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x58, 0x20, &(0x7f00000000c0)=[@fda={0x66646185, 0x5, 0x3, 0x25}, @flat={0x77622a85, 0x100, r4, 0x3}, @fda={0x66646185, 0x6, 0x3, 0x1c}], &(0x7f0000000140)=[0x48, 0x38, 0x0, 0x38]}, 0xd6c7}}, @request_death={0x400c630e, 0x2, 0x4}, @increfs_done={0x40106308, r5, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x38, 0x0, 0x40]}}, @free_buffer={0x40086303, r6}, @reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}], &(0x7f0000000280)=[0x30, 0x60, 0x38, 0x38, 0x48]}}], 0x34, 0x0, &(0x7f0000000400)="709c07130c31cbe3b7e127da1646be5f128617fa659b4a0bbbf1aa215ae94565930de63064ab0ee408269e068ef1a36d38090400"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 992.137015] binder: 16959:16963 ioctl 400454d9 20000000 returned -22 [ 992.140396] binder: 16959:16963 transaction failed 29201/-28, size 0-0 line 3255 18:33:41 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000"], 0x0, 0x0, 0x0}) 18:33:41 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) write$selinux_validatetrans(r0, &(0x7f00000000c0)={'system_u:object_r:audit_spool_t:s0', 0x20, 'system_u:object_r:login_exec_t:s0', 0x20, 0x3, 0x20, '/usr/sbin/cupsd\x00'}, 0x6a) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x78, 0xfff, 0x4}, 0xc) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ftruncate(r3, 0x8007ffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000a00)='tasks\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000a80)={0x7, 0x6d, 0x2}, 0x7) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc000, 0x0) r4 = creat(&(0x7f0000000840)='./file0\x00', 0x0) renameat2(r3, &(0x7f0000000800)='./file0\x00', r4, &(0x7f0000000880)='./file0\x00', 0x5) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000008c0)=""/165, &(0x7f0000000980)=0xa5) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x81, 0x4, 0x0, 0x2, 0x2, 0x3f, 0x3, 0x31d, 0x38, 0x39c, 0x1, 0x3f, 0x20, 0x2, 0x401, 0x0, 0x80}, [{0x1, 0x400, 0xe42, 0x7fff, 0x100000000, 0x10000, 0x400, 0xce2}, {0x6, 0x49d8, 0x40, 0x0, 0x1000, 0x7fff, 0x101, 0x5}], "e4487653c2c72bde891e578463c18db15f2ab36e2446d100fe5a5d53184a048d116de7eeda8fd9ab8736a336a09814196a5c47693bc39583a3bf8ab80a6dffe80fbf86576980c3b5050b12643f0aebf4ac029b88e624551fdd0f85b3cd11442215c69080af78fecb3cc6a0938c2cd062185a0caf316da05c76c0e33df227988032d510c6297d6f665023b31ec58d8b8746f8d213d5bb17da94db95176243590997b478ae5adb125efb130f1a6327e342c2fdf6ed1771f8a8c0dc3b4334537a7886e2d2412e5bc6f2e41ca7ce199fd523e346e45d577c3f86d8fce49da57c67b5c9b454e7abf43d", [[], [], [], [], [], []]}, 0x75f) [ 992.149154] binder: 16959:16968 ioctl 400454d9 20000000 returned -22 [ 992.215275] binder: 16977:16980 transaction failed 29201/-28, size 0-0 line 3255 18:33:41 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 18:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000006600000000000100000000000000000000000000caa222e3fd8153e30000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) open(&(0x7f0000000180)='./file0\x00', 0x8002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 992.215294] binder: 16977:16980 ioctl c0306201 20000440 returned -14 18:33:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x401, &(0x7f0000000100)="6a77a9098c475e8130a0acf1d599317572786f2aaa4bebbdbd1844b8e00970b214e2b974f7bf2789fb96c018af950d1f05f40ca2f2a80e19f9a13b0b4d1d30c73c035fdac23566d784b064af5f5afc92e1df679bb825b447dfeb6f04b9d409dcc64c75119807ca01dd4d7941f7f4a4441291947bdfe8d47d2067d6fbf1b6d4df3c0ab9794ce5996ec23b8773c0e3761d8c6646c2332c0a48d3860d") listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2, &(0x7f00000011c0)=[{&(0x7f00000000c0)="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", 0x1000, 0x200}, {&(0x7f00000010c0)="84cb5e7c8244b99a8b20d81d8ecb18ba9fca340047d04fd45d289b5e1d359c9a9cc209425d4b055c3d1ef9b28eb329943281ee7c79cd272884d890d322a0879abf927f8b140371182c58e307076b66486dd2f1be757acd98be8f82e4091c1892d56a45b5c5009157a4a9c9d237e72e17af35f377b93f31fbb23ba2ac8546bc2e77a4095de8a56fd23137505075e5118de37b65bfbd4b91743f08ad9a8026c2d67cac1d577b622264509cfc997c372cd9e2299d486ad26e7651660a0148be22d8859dcb99", 0xc4, 0x9}], 0x80000, &(0x7f0000001200)={[{@fat=@showexec='showexec'}, {@fat=@nocase='nocase'}, {@nodots='nodots'}, {@fat=@check_strict='check=strict'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}], [{@fsuuid={'fsuuid', 0x3d, {[0x73, 0x33, 0x37, 0xf87090c3d180b678, 0x77, 0x36, 0x39, 0x77], 0x2d, [0x65, 0x64], 0x2d, [0x7f, 0x37, 0x36, 0x33], 0x2d, [0x32, 0x63, 0x32], 0x2d, [0x7f, 0x36, 0x30, 0x66, 0x64, 0x7c, 0x63, 0x66]}}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@subj_user={'subj_user', 0x3d, '\\lomd5sumuser%nodev'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x65, 0x3f, 0x38, 0x0, 0x36, 0x77], 0x2d, [0x7e8c8b7753404e86, 0x75, 0x66, 0x62], 0x2d, [0x7f, 0x77, 0x37], 0x2d, [0x33, 0x0, 0x33, 0x30], 0x2d, [0x7f, 0x77, 0x65, 0x0, 0x33, 0x38, 0x37, 0x77]}}}, {@subj_user={'subj_user', 0x3d, 'cpuset+'}}]}) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 992.283439] audit: type=1400 audit(1553625221.422:87): avc: denied { create } for pid=16985 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 18:33:41 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8}, {r1, 0x4}, {r2, 0x2}, {r3, 0x8204}], 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x4}, 0x8) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b49ecef28d398d706431750966055f39c7d86d15f97b0fecb653994ab1292598d2b513c5f8ee6c6c286f5278792ecd14df72e86f0bd7f9bf85a74b67e05f36ca9aa28da16a7264bdeddb1b2b9abb53ab23387e2562fe65521dae6ceb5d7387930f7f97fef9bf8e78ce904d35f6c61c348ec0b6d8336b31caf30c6293"]], 0x0, 0x0, 0x0}) 18:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x10b180, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1002800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0x501, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) r7 = getgid() getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={{0x0, 0x7530}, {0x77359400}}) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000800)=0xe8) r13 = getegid() bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)={&(0x7f00000012c0)='./file0\x00', 0x0, 0x8}, 0x10) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000a80)=0xe8) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="f0050000000000000100000000000000010000000000000003000000000000000500000000000000000000000000000000000000de0000000400000000000000db0000000000000004000000000000000500000000000000ff0100000000000006000000000000000000000081000000030000001400000007000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="710900000000008000000000060000000000000004000000000000000d000000080000002f6465762f62696e6465722300000000010000000000000000000000000000000300000000000000000800000000000007000000c343000006000000000000000900000000000000030000000000000007000000000000000000000000000000ffffff7f000000000100000083e000000000000004000000b6020000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ffffffff08000000000000000400000000000000b0070000000000000d000000060000002f6465762f62696e6465722300000000030000000000000001000000000000002c0700000000000001800000000000000001000003000000040000000000000005000000000000003f0000000000000000080000000000000600000000000000010000000000000005000000000000001a00000010a7000004000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="06000087d1b68a11e8fc000000000000000000020000000000000007000000000000000d00000000c000002f6465762f62696e6465722300000000050000000000000000000000000000000300000000000000080800632f9de9000000000000000000000000000000000007000000000000000100000002000000000000000000000000000000080000010000000006000000ec68eeae1ff9aae0740c0000e1", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000000200000000000000040000000000000000020000000000000f000000ffffffff6d696d655f747970656367726f75700005000000000000000100000000000000060000000000000006000000000000004604000005000000040000000000000004000000000000000200000000000000000000000000000007000000000000002baa000000000000170000000100010003000000ff0100003f000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="020000000300000000000000030000000000000008000000000000000d000000008000002f6465762f62696e64657223000000000300000000000000020000000000000004000000000000000100000001000000000001001ff9000003000000000000000000000000200000020000000000000007000000000000007f0000000000000004000000000000000100008000000000010000000800000001000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="1700000008000000000000000300000000000000ffffff7f000000001d000000620c000076626f786e657430e6766d6e657430716c6f6e6f6465762b2465746830000000010000000000000002000000000000000400000000000000ff7f000000000000fd08000003000000060000000000000000000020000000000100000000000000020000000000000000080000000000000100000000000000030000000000000000000000010400003f000000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="080000000700000000000000060000000000000056000000000000000200000040d00000212a000000000000040000000000000002000000000000000600000000000000050000000000000040000000090000000300000000000000c1ffffffffffffff0600000000000000ef00000000000000020000000000000006000000000000000000000002000000080000000700000004000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0800000001000000000000000600000000000000348a0000000000000d000000020000002f6465762f62696e6465722300000000050000000000000003000000000000000080000000000000090000000000000001040000fcffffff0000000000000000000000000000000004000000000000000700000000000000060000000000000007000000000000000100000001000000030000005f000000fe000000", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="050000000400000000000000020000000000000008000000000000000000000003000000"], 0x5f0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 18:33:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/233, 0xe9, 0x40000002, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40001, 0x0) 18:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x7fe) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000600)=0x3, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) fcntl$getflags(r0, 0xb) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_AIE_OFF(r1, 0x7002) lchown(&(0x7f0000000380)='./file0\x00', r5, r6) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r7, 0x7014) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="0c63000012634840020000000000000002000000000000000000000011000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a687301010000", @ANYRES64=r4, @ANYBLOB="0200000000000000852a6a7301000000", @ANYRES64=r8, @ANYBLOB="72e97dea839c1e5621e75ab056b7b288", @ANYRES32=r0, @ANYBLOB="000000000300000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="320e000000000000"], 0x7, 0x0, &(0x7f0000000280)="03f7744d82aa83"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="d79c0baeef96f46b83eb401c16e94fd96807503061a668391d8c83569882511ee61cca576c6880a2a0b0d041534c963c23ad428856ad919bdbe493758fe1f91dcefb098942e4aaf75ff096fba43577c9f5e0610eec2b62279282a921b4e9706a9551a9fdc9eb01e9ad02394718caf553a19abaacf489088bb24a2e7665d5d682648e4b25599c3c43f5e6ff3c188182258015ac5ed0849eb1a60077a83ba7087c807701c7e0f25281c83bf781fd05cc74b7bbf90bc9", 0xb5, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x3, 0x1}, &(0x7f00000001c0)=ANY=[@ANYBLOB='enc=raw hash=md5-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)="99a163b02463eb0b169c00eabd1ed137ecfcbb41f980d048999460cae7112907407d0e6087d845bd8bd0b3fae0d790bbba0be583ca6c3e187ef3bc6cbb04471794abdd63775758e85965b343571589443e1055639a657c1a1b740aa9546908cc1d9d0fa994efccc01c0a0fab24b45ccf2ddc8b41b5c42be86103610a69b29e1e2224605f55866378812270c83854923beca142503cd32b7b7cd4fc3ed1", &(0x7f0000000300)=""/252) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 992.400288] binder: 17009:17012 ioctl 4b31 20000000 returned -22 [ 992.410297] binder: 17010:17013 transaction failed 29189/-22, size -152239879831420928-14898049 line 3118 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634801000000000000000000000000000003000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "3f509690fbf32e0efcb424e2bb5967e0"}, 0x11, 0x2) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000100)=""/4096, 0x1000) dup3(r0, r0, 0x80000) pipe(&(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 992.416028] binder: 17009:17014 ioctl 4b31 20000000 returned -22 [ 992.525902] binder: 17031:17038 transaction failed 29201/-28, size 0-0 line 3255 [ 992.531846] binder: 17031:17041 transaction failed 29201/-28, size 0-0 line 3255 18:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) io_setup(0xfffffffffffffe01, &(0x7f0000000000)=0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000000040)="2f7806ca277c1ba2306dfdf498ae41f7d74c59c7fc240f3b7ebbeb16f65f119be48daaa5e497d320b508919334b6b247bd6942c714dab9891d3f49111dc0691d6becbdc90c1f7665de1c4dc9195221b88d98b4881dc15746539414b50a9558e73dfaae8a77d0fc44463dec382c9558965cc1ad01ebe9fb6574f0cae92d550188b4d0b7fb811ac0c1700a57cfcae9b5fff1d92e98f0f8c05c214e84edbd68d76cdf0a1bca95015f07f0aaf43fc5013c2c0696f1fd75d400d2391a58c62a23b3b172e603b7e13ec21ff1d1db2e5fa13920f790c95163fb5421bb8ae751c12a1645bf214dddd94001853d57b3", 0xeb, 0x8, 0x0, 0x3, r2}, &(0x7f00000001c0)) 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xb00, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0xfffffffffffffff9) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 'usercpuset.,$)\\lonodev', 0x20, 0x2, 0x20, [0x3d, 0x67, 0x0, 0x3f, 0x77]}, 0x47, r1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x28) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 992.606167] binder: undelivered TRANSACTION_COMPLETE [ 992.616841] binder: release 17047:17053 transaction 1675 out, still active 18:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 992.653293] binder: 17060:17067 unknown command 21521169 [ 992.661133] binder: unexpected work type, 4, not freed [ 992.661137] binder: undelivered TRANSACTION_COMPLETE [ 992.661998] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.662128] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.662795] binder: release 17030:17035 transaction 1670 out, still active [ 992.662800] binder: unexpected work type, 4, not freed [ 992.662803] binder: undelivered TRANSACTION_COMPLETE [ 992.662893] binder: release 17026:17034 transaction 1667 out, still active [ 992.662898] binder: unexpected work type, 4, not freed [ 992.662901] binder: undelivered TRANSACTION_COMPLETE [ 992.662975] binder: release 17019:17023 transaction 1664 out, still active [ 992.662980] binder: unexpected work type, 4, not freed [ 992.662983] binder: undelivered TRANSACTION_COMPLETE [ 992.663168] binder: undelivered TRANSACTION_ERROR: 29189 [ 992.663229] binder: release 17008:17011 transaction 1660 out, still active [ 992.663234] binder: unexpected work type, 4, not freed [ 992.663237] binder: undelivered TRANSACTION_COMPLETE [ 992.663308] binder: release 16997:17001 transaction 1657 out, still active [ 992.663312] binder: unexpected work type, 4, not freed [ 992.663315] binder: undelivered TRANSACTION_COMPLETE [ 992.663382] binder: release 16987:16992 transaction 1654 out, still active [ 992.663386] binder: unexpected work type, 4, not freed [ 992.663388] binder: undelivered TRANSACTION_COMPLETE [ 992.663419] binder: release 16987:16992 transaction 1651 out, still active [ 992.663423] binder: unexpected work type, 4, not freed [ 992.663425] binder: undelivered TRANSACTION_COMPLETE [ 992.663490] binder: release 16984:16988 transaction 1648 out, still active [ 992.663494] binder: unexpected work type, 4, not freed [ 992.663497] binder: undelivered TRANSACTION_COMPLETE [ 992.663585] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.663644] binder: release 16970:16976 transaction 1644 out, still active [ 992.663648] binder: unexpected work type, 4, not freed [ 992.663650] binder: undelivered TRANSACTION_COMPLETE [ 992.663733] binder: release 16948:16978 transaction 1641 out, still active [ 992.663738] binder: unexpected work type, 4, not freed [ 992.663741] binder: undelivered TRANSACTION_COMPLETE [ 992.668944] binder: release 17062:17066 transaction 1678 out, still active [ 992.668949] binder: unexpected work type, 4, not freed [ 992.668952] binder: undelivered TRANSACTION_COMPLETE [ 992.668992] binder: release 16948:16955 transaction 1638 out, still active [ 992.668996] binder: unexpected work type, 4, not freed [ 992.668999] binder: undelivered TRANSACTION_COMPLETE [ 992.669692] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.669784] binder: release 16956:16960 transaction 1634 out, still active [ 992.669788] binder: unexpected work type, 4, not freed [ 992.669791] binder: undelivered TRANSACTION_COMPLETE [ 992.669949] binder: release 16930:16933 transaction 1628 out, still active [ 992.669953] binder: unexpected work type, 4, not freed [ 992.669956] binder: undelivered TRANSACTION_COMPLETE [ 992.705440] binder: release 17065:17070 transaction 1684 out, still active [ 992.705446] binder: unexpected work type, 4, not freed [ 992.705449] binder: undelivered TRANSACTION_COMPLETE [ 992.705492] binder: release 17065:17070 transaction 1681 out, still active [ 992.705496] binder: unexpected work type, 4, not freed [ 992.705499] binder: undelivered TRANSACTION_COMPLETE [ 992.726638] binder: release 17072:17076 transaction 1687 out, still active [ 992.726644] binder: unexpected work type, 4, not freed [ 992.726647] binder: undelivered TRANSACTION_COMPLETE [ 993.065469] binder: 17060:17067 ioctl c0306201 20000440 returned -22 18:33:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x80) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0x1]) 18:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000001b0e"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 18:33:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fallocate(r0, 0x1, 0x100000001, 0xfffffffffffffffc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'mime_type%'}], 0xa, "79c69e27e847a96f0d50c21973f433b841e9ab01c99170bca38aed4ff393d3228b56df4148b2ff1ec43f6460af4601123f5875b5c4d4afe426bab4fbf53b4ff7ac29f471bbc526943cb1555cffeb207d2661836fe3439705a4"}, 0x6f) 18:33:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = dup3(r0, r0, 0x80000) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0xffffffffffffff00}, 0xf) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004680)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000004780)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000005ec0)={@broadcast, @local, 0x0}, &(0x7f0000005f00)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000060c0)={0x0, @multicast2, @remote}, &(0x7f0000006100)=0xc) getsockname$packet(r3, &(0x7f0000006140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006180)=0xfffffffffffffe6f) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000061c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000062c0)=0xe8) accept4$packet(r1, &(0x7f0000006300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006340)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000006380)={0x0, @empty}, &(0x7f00000063c0)=0xc) accept4$packet(r1, &(0x7f00000065c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006600)=0x14, 0x80800) getsockname$packet(r3, &(0x7f0000006640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006680)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000066c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000067c0)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000006800)={@loopback, 0x0}, &(0x7f0000006840)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000d2c0)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f000000d3c0)=0xe8) accept$packet(r3, &(0x7f000000d4c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000d500)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000d5c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f000000d6c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000000d7c0)={@local, @multicast1, 0x0}, &(0x7f000000d800)=0xc) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f000000d840)={@local, 0x0}, &(0x7f000000d880)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f000000d8c0)={@broadcast, @multicast1, 0x0}, &(0x7f000000d900)=0xc) getpeername$packet(r3, &(0x7f000000d940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000d980)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000d9c0)={0x0, @dev, @remote}, &(0x7f000000da00)=0xc) getpeername$packet(r3, &(0x7f000000da80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000dac0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000db00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f000000e4c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f000000e480)={&(0x7f000000db40)={0x92c, r5, 0xf00, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x130, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r8}, {0xfc, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffeb}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xd6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x22c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xd4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x70, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x8000, 0x3, 0x8b, 0x83f3}, {0x100000000, 0x8000, 0x1, 0x7}, {0xffff, 0x7, 0xb675, 0x28000000}, {0x7fffffff, 0x5, 0x81, 0x2}, {0x28fb, 0x800, 0x6, 0x40}, {0x9, 0x7e, 0x80000000, 0x2}, {0x10001, 0x5, 0x9, 0x1}]}}}]}}, {{0x8, 0x1, r21}, {0x1c0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r23}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r25}, {0x1d4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800000000000}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 18:33:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:42 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x100, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x22110, r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x9}, 0x1c) 18:33:42 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, [], [{0x9, 0x20, 0xfffffffffffffc01, 0x8, 0x816c, 0xd5a9}, {0x0, 0x7ff, 0x80000001, 0x0, 0x1, 0x80000001}], [[], []]}) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400200, 0x104) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="f95972609f") fstat(r0, &(0x7f0000000340)) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x81}, 0x8) 18:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x100000000, 0x0, "6a64ea2107a70939d33210ddd1dd427430c465b09635ec5d5241d64ddc7bc6df677d6ebe231e5f92cc689bb6181b91e46b5b78abef42a4aa7e25b9e668a561aeca8af3eb0f2c12cdbe5c5473a63cba44"}, 0xd8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x8, 0x5, 0x3, 0x4, 0x961}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 993.420014] binder: release 17083:17088 transaction 1690 out, still active [ 993.429900] binder: 17085:17086 transaction failed 29201/-28, size 0-0 line 3255 [ 993.433971] binder: unexpected work type, 4, not freed 18:33:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xa3e, 0x4) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, 'posix_acl_access@trustedself'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '*\x00'}], 0xa, "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"}, 0x109b) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 993.433975] binder: undelivered TRANSACTION_COMPLETE 18:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800000000000000080000000000000084c7ed37f88b535ba5767f722a04fb074ae6493bae5a7e00a6e83c05068e3f8f156e1ebee63714e19c8d6bd2c73337d55ce051b0672d14d75c5da86c0f9a4735cd0b65354ae69a848855af6a7bb9bad365a0f3bd922d063d2fd0aec773c6fc5feef095ff572bce46be2979ef9b499514246e055815e6459ede7c67f6e0bfd4df7f8b989e089f0ebb9f70d125e2e894bdf3c407e9f1c6bdc21053cc30dab3a675add31d8527ac4af21f39d96c68e4b62d81d3fb5d", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="f6f1fb00feff00076f99b062cbf0929ecda499495217cf7914ddc4a8a7023420f79575a91cc47e05b1f57aeb9c36257aea4b265451d324c33cba18789569be653f2d25f88891159cd762dbdbfe9c1c8b295ef9c56600000000000000000000000000"]], 0x30a, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x52100, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', r2}) recvfrom(r1, &(0x7f0000000040)=""/80, 0x50, 0x2003, &(0x7f0000000280)=@xdp={0x2c, 0x3, r3, 0x11}, 0x80) 18:33:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x3, 0x1, 0x3, 0x9}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x50, r0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 18:33:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 993.445136] binder: release 17081:17090 transaction 1694 out, still active [ 993.445142] binder: unexpected work type, 4, not freed 18:33:42 executing program 4: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x1000, 0x5, 0x7}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 993.445145] binder: undelivered TRANSACTION_COMPLETE [ 993.497357] binder: release 17094:17096 transaction 1697 out, still active [ 993.497364] binder: unexpected work type, 4, not freed [ 993.497367] binder: undelivered TRANSACTION_COMPLETE [ 993.527386] binder: 17104:17107 ioctl 401c5820 20000140 returned -22 [ 993.537798] binder: 17104:17107 ioctl 401c5820 20000140 returned -22 [ 993.538015] binder: release 17104:17107 transaction 1700 out, still active [ 993.538020] binder: unexpected work type, 4, not freed [ 993.538023] binder: undelivered TRANSACTION_COMPLETE [ 993.561560] binder: release 17109:17115 transaction 1703 out, still active [ 993.561576] binder: unexpected work type, 4, not freed [ 993.561579] binder: undelivered TRANSACTION_COMPLETE [ 993.611050] audit: type=1400 audit(1553625222.742:88): avc: denied { audit_read } for pid=17118 comm="syz-executor.4" capability=37 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 993.630124] binder: 17120:17124 got transaction with invalid data ptr [ 993.630154] binder: 17120:17124 transaction failed 29201/-14, size 24-8 line 3287 [ 993.630181] binder: 17120:17124 ioctl c0306201 20000440 returned -14 [ 993.637102] binder: 17120:17124 got transaction with invalid data ptr [ 993.637128] binder: 17120:17124 transaction failed 29201/-14, size 24-8 line 3287 [ 993.637145] binder: 17120:17124 ioctl c0306201 20000440 returned -14 [ 993.640273] binder: release 17122:17125 transaction 1708 out, still active [ 993.640278] binder: unexpected work type, 4, not freed [ 993.640281] binder: undelivered TRANSACTION_COMPLETE 18:33:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) 18:33:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121000, 0x0) write$UHID_CREATE(r2, &(0x7f0000000180)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/124, 0x7c, 0x7, 0x2, 0x16, 0xe13, 0x66}, 0x120) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 18:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) times(&(0x7f0000000000)) [ 993.666791] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.666821] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.833936] binder: 17085:17086 transaction failed 29201/-28, size 0-0 line 3255 [ 993.834958] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.847049] binder: undelivered TRANSACTION_ERROR: 29201 [ 993.868981] binder: release 17136:17138 transaction 1715 out, still active [ 993.878925] binder: unexpected work type, 4, not freed [ 993.898199] binder: undelivered TRANSACTION_COMPLETE [ 993.908640] binder: 17141:17143 transaction failed 29189/-22, size 0-0 line 3118 [ 993.910111] binder: 17141:17143 transaction failed 29189/-22, size 0-0 line 3118 [ 993.936827] binder: undelivered TRANSACTION_ERROR: 29189 [ 993.942766] binder: undelivered TRANSACTION_ERROR: 29189 [ 993.948248] binder: release 17136:17138 transaction 1712 out, still active [ 993.955743] binder: unexpected work type, 4, not freed [ 993.961026] binder: undelivered TRANSACTION_COMPLETE 18:33:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:33:43 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000a577c2de3ba473c41915366266a349e83755153cd3a1055bd53534158e40000000000000", @ANYRES64=r0, @ANYBLOB="010b2cbd7000fddbdf2501000000000000000b000000000c001473797a3000000000"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1000000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 18:33:43 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) r2 = mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0xc, 0x9010, r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000015c0)={0x0, 0x2710}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x58, 0x10, &(0x7f00000001c0)=[@flat={0x77622a85, 0xa, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x1, 0x4, 0x28}, @flat={0x776a2a85, 0x101, r2, 0x4}], &(0x7f0000000280)=[0x38, 0x38]}, 0xffffffff7fffffff}}], 0x5b, 0x0, &(0x7f0000001480)="5da1fcc32e50f9614d0963f5a84568d7f57eddf6e414a11b48698f0ae518cab86565d4bcc4654591f6f758ff8278b3da4ca7bc78873088b27c8821eafa95823864df4390c9aa845732386f74a660fe9f59edd2e2967de5bc667890"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KDMKTONE(r3, 0x4b30, 0x2) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(r3, &(0x7f0000001500)=@l2, &(0x7f0000001580)=0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000480)=""/4096) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x8000}, @timestamp, @sack_perm, @sack_perm], 0x5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300000000af8001ee0f5ae5c31def13bcfffeb7851e2a92c0da1178174ee5d26672fc51b59b2e772bf229bbd19ef483aced48", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000955caf90000"]], 0x0, 0x0, 0x0}) 18:33:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 18:33:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x644c0, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000597fa4897615994808bec164fdeb286a651ed3e94142b4b2c51bd10104efa2d1c340f248e96fae0e5c8d8ba5c37edc3cf1843de772788fcde46fffa529d7d4038990a17051bf0e46de45855ec56d34a5348dfab3d0c913decdef1044f5c90e14e708f76d7ca64292f7a899f89a85ce20c3ffab2acb104fb5197d928465e7edd204dc33a7f1708fede9c6d7d249a51e3e8d0b3a0491d6900b03542f69f1083ca28cb04e280488a19cbbf62b292eeac7d17168fd7cf54ae6bbf629627844e29222f286bdc0fbdc19f5691cdd08e099c642e3ec592b330f5673d308be77aede885a810a9522dad46fd822"], 0x0, 0x0, 0x0}) 18:33:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000600000002004e220000000900000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041bf6ff4381b779c691d64cb9fc65e7a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff000000000000000000000000000000000000000000000000000000000000000000e0c5c46d0000000000000000000000000000000000002e00000000f7ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x390) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xd) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 994.393304] binder: 17151:17155 transaction failed 29201/-28, size 0-0 line 3255 [ 994.405032] ------------[ cut here ]------------ [ 994.405039] kernel BUG at drivers/android/binder_alloc.c:1105! [ 994.405049] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 994.405056] Modules linked in: [ 994.405069] CPU: 1 PID: 17156 Comm: syz-executor.5 Not tainted 4.9.165+ #28 [ 994.405077] task: ffff880191f297c0 task.stack: ffff8801a7e28000 [ 994.405101] RIP: 0010:[] [] binder_alloc_do_buffer_copy+0xcb/0x500 [ 994.405107] RSP: 0018:ffff8801a7e2f518 EFLAGS: 00010212 [ 994.405114] RAX: 0000000000040000 RBX: 0000000020003b98 RCX: ffffc9000092f000 [ 994.405120] RDX: 0000000000000409 RSI: ffffffff8221c34b RDI: ffff8801c87b2858 [ 994.405126] RBP: ffff8801a7e2f598 R08: ffff8801a7e2f870 R09: 0000000000000028 [ 994.405132] R10: ffffed0034fc5efe R11: ffff8801a7e2f7f7 R12: 0000000000000020 [ 994.405138] R13: ffff8801cb5ccb98 R14: 0000000000000028 R15: ffff8801a7e2f870 [ 994.405147] FS: 00007f280770b700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 994.405154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 994.405161] CR2: 0000001b2ff22000 CR3: 000000018a560000 CR4: 00000000001606b0 [ 994.405172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 994.405179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 994.405180] Stack: [ 994.405199] ffff8801a7e2f7f0 ffff8801a7e2f548 ffffffff814f79e6 0000000000000008 [ 994.405212] dffffc0000000000 ffff8801d2f00858 00ff8801a7e2f5d8 ffff8801d2f00800 [ 994.405226] ffff880191f2aa20 ffff8801cb5ccb00 0000f9ca55090000 ffff8801a7e2f870 [ 994.405228] Call Trace: [ 994.405240] [] ? memcpy+0x46/0x50 [ 994.405252] [] binder_alloc_copy_from_buffer+0x37/0x42 [ 994.405264] [] binder_get_object+0xa2/0x1a0 [ 994.405275] [] binder_transaction+0x1fdf/0x5840 [ 994.405285] [] ? binder_transaction+0x1141/0x5840 [ 994.405295] [] ? trace_hardirqs_on+0x10/0x10 [ 994.405305] [] ? binder_inc_ref_for_node+0xba0/0xba0 [ 994.405316] [] ? perf_trace_lock_acquire+0x530/0x530 [ 994.405326] [] ? HARDIRQ_verbose+0x10/0x10 [ 994.405335] [] ? __might_fault+0x114/0x1d0 [ 994.405344] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 994.405352] [] ? __might_fault+0x114/0x1d0 [ 994.405362] [] binder_thread_write+0x593/0x2110 [ 994.405373] [] ? debug_smp_processor_id+0x1c/0x20 [ 994.405382] [] ? perf_trace_lock+0x11e/0x540 [ 994.405392] [] ? binder_transaction+0x5840/0x5840 [ 994.405401] [] ? HARDIRQ_verbose+0x10/0x10 [ 994.405410] [] ? __might_fault+0x114/0x1d0 [ 994.405420] [] binder_ioctl+0xecd/0x1720 [ 994.405429] [] ? debug_smp_processor_id+0x1c/0x20 [ 994.405438] [] ? binder_poll+0x240/0x240 [ 994.405446] [] ? __lock_acquire+0x5e5/0x4350 [ 994.405456] [] ? check_preemption_disabled+0x3c/0x200 [ 994.405467] [] ? __might_sleep+0x95/0x1a0 [ 994.405476] [] ? binder_poll+0x240/0x240 [ 994.405489] [] do_vfs_ioctl+0xb87/0x11d0 [ 994.405503] [] ? selinux_file_ioctl+0x103/0x550 [ 994.405513] [] ? ioctl_preallocate+0x210/0x210 [ 994.405525] [] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 994.405533] [] ? __fget+0x208/0x370 [ 994.405544] [] ? __fget+0x22f/0x370 [ 994.405555] [] ? __fget+0x47/0x370 [ 994.405575] [] ? security_file_ioctl+0x8f/0xc0 [ 994.405586] [] SyS_ioctl+0x8f/0xc0 [ 994.405598] [] ? do_vfs_ioctl+0x11d0/0x11d0 [ 994.405609] [] do_syscall_64+0x1ad/0x570 [ 994.405623] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 994.405790] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 0a 10 ff 4d 39 e6 76 07 e8 05 0a 10 ff <0f> 0b e8 fe 09 10 ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 ed [ 994.405803] RIP [] binder_alloc_do_buffer_copy+0xcb/0x500 [ 994.405807] RSP [ 994.405814] ---[ end trace f0f21aea1e8cc2e8 ]--- [ 994.405820] Kernel panic - not syncing: Fatal exception [ 994.406144] Kernel Offset: disabled [ 994.833307] Rebooting in 86400 seconds..