155c4834532358f9879813368", @ANYRES32=r3, @ANYBLOB="ec000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100010008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400a4eb00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400119f000008000100", @ANYRES32=r6, @ANYBLOB="3801020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004004a0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004004423000008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004008100000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="280102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff03000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff010000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400c20e000008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="a801020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040003000000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="84000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r19, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="fc0102003c00010024000100757365725ff042786c00400003e5a372244c8a35fd3db29fba0000000008000300460000000400040008000600000000", @ANYRES32=r22, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004004000000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r25, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffffff08000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB="b400020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004007500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400fcffffff08000600", @ANYRES32=r28, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29], 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r30=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x84000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@rand_addr="33325f202fe140ece374126b1a2690d2", @dev={0xfe, 0x80, [], 0x1b}, @mcast1, 0x2, 0x8d0, 0x971, 0x400, 0x1c, 0x0, r2})
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x369000, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x7f, &(0x7f0000000080)="701e5b0775644701dbf92ae5c9bccd41cb6940ef2b1378b9b9485171b183c6b2c2a4a217c00b4174ba037ad61a4412649e529e73dbfe5c51e1d5ef6c13d0f1a41f0399c67e85e8e8cc9c16b5db4d7907c237e78db1c7299d4c887445e125e2b7a408c5816f47a7e80dbc727208ca418fe9eb2f4d9920efa280e0b3a19f1eb4819f19a0e103f93ecf4f54c7f08864fe23b45ab770", 0x94)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140), 0x4)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180))

07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$KDSKBLED(r0, 0x4b65, 0x2000000000000000)
clone(0x100000, &(0x7f00000000c0)="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", &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="7690c6233261c65c65e473c7576e97a0a16b35d3c012bd551bb22d549dcade9f51ad094f3b11134a9bf7caa19d247e")
umount2(&(0x7f00000002c0)='./file0\x00', 0x6)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x4)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffff9c, 0x0, 0x1a, &(0x7f0000000080)='vboxnet0keyring&.vboxnet0\x00'}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup(r0)
ioctl$KDDISABIO(r1, 0x4b37)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  356.164180] binder: binder_mmap: 22465 20ffc000-21000000 bad vm_flags failed -1
[  356.168724] binder: 22466:22471 BC_FREE_BUFFER u0000000000000000 no match
[  356.182612] binder: binder_mmap: 22465 20ffc000-21000000 bad vm_flags failed -1
[  356.183252] binder: binder_mmap: 22468 20ffc000-21000000 bad vm_flags failed -1
07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000580)=0x2)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3d8, r2, 0x602, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff29}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_BEARER={0x150, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x10}, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd05e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffffffffffe, @loopback, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x83}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x81}}}}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x333}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x3d8}}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r3, r3, 0x0, 0x3)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0x35)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x78, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x38, &(0x7f0000000000)=[@fda={0x66646185, 0x1, 0x4, 0x27}], &(0x7f0000000080)=[0x20, 0x28, 0x0, 0x0, 0x40, 0x78, 0x38]}, 0x3}}, @request_death={0x400c630e, 0x0, 0x4}, @increfs_done={0x40106308, r1, 0x3}, @release], 0x6e, 0x0, &(0x7f00000001c0)="4ad734e2acb0a5a3183988863c793dfff849c1a6e9e6a7f75929114cd4af03c29749879876261fb10b7a4de74e5090909c11e43b6e13da2984904756ec8106bf67b895e8a991c1a18314bd0dcae0e0f38310d234a20d9ef077593bc1034f6e805aca98b98d11110bfa17da1b097b"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={r3, 0x8}, &(0x7f0000000340)={'enc=', 'raw', ' hash=', {'michael_mic-generic\x00'}}, &(0x7f00000003c0)="90e3263964efb43f33326b1ec906ad20ad3aaea1ec3a1ba3d0181f73c12b762f04686c27806613739e399d7d062131477c148f9af487f0db8151a90d3aff2951d9db161afcb200e5e67c22ddd293392082e5eafd3e80889d7e710574d37af211cdc52ad8fd0dbc461bcccd90cc2bd587bd53edf27ebdd138587612d6dee304909ba5b9521d0c69adbaaa86e240c134f26b4a75af45a4d0946a3a98b5b3cc7f5b26084badb7313640b342909e8b0f75b18f66628cf17b4c09b4f206c65c9e2bd16e280c50893327c3a852aeddd9e65c620d3a932417879b524fdbfe2b278057f5cbeffa85ac479b96975ecffbffbbe241ab63e889cb9f8796", &(0x7f00000004c0)=""/115)
fcntl$setlease(r2, 0x400, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8013, r0, 0x1)
timer_create(0x4, &(0x7f0000000540)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000580)=<r4=>0x0)
timer_getoverrun(r4)

[  356.219346] binder: binder_mmap: 22468 20ffc000-21000000 bad vm_flags failed -1
[  356.229215] binder: 22464:22473 ioctl 8933 20000c00 returned -22
[  356.241177] binder: 22464:22473 got transaction to invalid handle
[  356.254254] binder: binder_mmap: 22483 20ffc000-21000000 bad vm_flags failed -1
[  356.261924] binder: 22464:22473 transaction failed 29201/-22, size 0-0 line 3018
07:02:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  356.286681] binder: 22482:22490 ioctl 4b37 0 returned -22
[  356.291948] binder: undelivered TRANSACTION_ERROR: 29201
[  356.311238] binder: 22482:22490 BC_FREE_BUFFER u0000000000000000 no match
[  356.324424] binder: 22494:22500 got reply transaction with no transaction stack
07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  356.327409] binder: binder_mmap: 22483 20ffc000-21000000 bad vm_flags failed -1
[  356.338806] binder: 22498:22503 got transaction to invalid handle
[  356.348545] binder: 22494:22500 transaction failed 29201/-71, size 32-56 line 2926
[  356.358341] binder: 22498:22503 transaction failed 29201/-22, size 0-0 line 3018
[  356.385949] binder: undelivered TRANSACTION_ERROR: 29201
07:02:11 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/224)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x158810, 0xffffffffffffffff, 0x7fffffff)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x802, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='\x00', 0xffffffffffffff9c}, 0x10)
r5 = epoll_create(0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001800)={0xd4, 0x0, &(0x7f0000000700)=[@increfs_done={0x40106308, r1, 0x4}, @decrefs={0x40046307, 0x4}, @increfs_done={0x40106308, r2, 0x3}, @dead_binder_done={0x40086310, 0x4}, @exit_looper, @register_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x48, 0x8, &(0x7f0000000580)=[@fd={0x66642a85, 0x0, r3, 0x0, 0x2}, @fd={0x66642a85, 0x0, r4, 0x0, 0x3}, @fd={0x66642a85, 0x0, r5, 0x0, 0x3}], &(0x7f0000000600)=[0x28]}, 0xfffffffffffffeff}}, @reply={0x40406301, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, &(0x7f0000000640), &(0x7f0000000680)=[0x38, 0x48, 0x40, 0x20, 0x40, 0x38, 0x68, 0x18, 0x60, 0x38]}}], 0x1000, 0x0, &(0x7f0000000800)="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"})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0)
ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000000440)={0x2, 0x4, 0x2, 0x200, 0x4, 0x200})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, r7, 0x411, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x91}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x50)

07:02:11 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1f75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000001380)={<r0=>0xffffffffffffffff}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x9)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x1c0000000000000, 0x4)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
timer_delete(0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000340)=0xe8)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8, 0x9, 0x3b, 0xfffffffffffffff9, 0x7f})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r1, 0x0)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116348efe6"], 0x0, 0x0, 0x0})

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x3, &(0x7f00000000c0)=0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')

[  356.410407] binder: 22507:22510 BC_FREE_BUFFER u0000000000000000 no match
07:02:11 executing program 4:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x8d61167acecf83f6)
socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4})
clone(0x2102005ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8a400, 0x0)
sendfile(r2, r2, 0x0, 0x3)

07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e, 0x143053, r0, 0x6)
sendfile(r0, r0, 0x0, 0x3)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r3 = getpgrp(0x0)
ioprio_get$pid(0x0, r3)

[  356.472498] binder: binder_mmap: 22521 20ffc000-21000000 bad vm_flags failed -1
[  356.486000] binder: 22524:22526 BC_FREE_BUFFER u0000000000000000 no match
[  356.495156] binder: 22523:22529 unknown command -280468719
[  356.507716] binder: binder_mmap: 22520 20ffc000-21000000 bad vm_flags failed -1
07:02:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x581140, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
io_setup(0x0, &(0x7f00000000c0))

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3ad7e6df0b19cb65aa6533f2c4a2ca65cdc7fa086c751e02a862c4", @ANYRES64=0x0], 0x0, 0x0, 0x0})
truncate(&(0x7f00000000c0)='./file0\x00', 0xab)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'syzkaller1\x00'})

[  356.530103] binder: 22523:22529 ioctl c0306201 20000300 returned -22
[  356.565753] binder: binder_mmap: 22536 20ffc000-21000000 bad vm_flags failed -1
07:02:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100))
r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x400900)
read(r2, &(0x7f0000000240)=""/195, 0xc3)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
getsockopt(r3, 0x1f, 0x5, &(0x7f0000000000)=""/58, &(0x7f0000000080)=0x3a)
epoll_pwait(r1, &(0x7f0000000340)=[{}, {}], 0x2, 0x6, &(0x7f0000000380)={0x7fffffff}, 0x8)

[  356.582276] binder: binder_mmap: 22520 20ffc000-21000000 bad vm_flags failed -1
[  356.596517] binder: 22546:22548 got transaction to invalid handle
07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x100012, r0, 0x0)

[  356.628944] binder: 22554:22557 unknown command -538519750
[  356.636137] binder: 22546:22548 transaction failed 29201/-22, size 0-0 line 3018
[  356.642094] binder: 22554:22557 ioctl c0306201 20000240 returned -22
[  356.649140] binder: binder_mmap: 22556 20ffc000-21000000 bad vm_flags failed -1
[  356.658242] binder: binder_mmap: 22559 20ffd000-21000000 bad vm_flags failed -1
[  356.669220] binder: binder_mmap: 22556 20ffc000-21000000 bad vm_flags failed -1
[  356.677551] binder: 22546:22548 got transaction to invalid handle
[  356.684632] binder: undelivered TRANSACTION_ERROR: 29201
[  356.690961] binder: 22546:22548 transaction failed 29201/-22, size 0-0 line 3018
[  356.706332] binder: undelivered TRANSACTION_ERROR: 29201
07:02:11 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x6, 0x100000001)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="31eb2e02311461094c60c0ee98459e45", 0x10)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x8000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)="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", 0x1000, r1}, 0x68)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x8, 0x6}, 0x10)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:11 executing program 1:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x10080, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@loopback}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0x0)

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000840e61de7a6078ab674b1ad8ee50b97aab14bd2ecf0e2c6be9bb19925f1a79506b5052bcf6b7284357573374045e2eaf93d974565a509214890a148ac955822f32deb488043beea74df0a147b002badf0d0382ce3f643d7feda955b18b4d2a70045a7b0c8e3393a1b03395c600c20b18e93523afe8aa791bf8bb740487e03b890fc19cfc1aae96673120d11752be3157328fee5a78a5110", @ANYRES64=0x0], 0x0, 0x0, 0x0})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x490001, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3ff, @rand_addr="3b7fa7a72f7a9f860fd88997871532b9", 0x3}, 0x1c)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000001c0)=""/77)
prctl$PR_SET_TIMERSLACK(0x1d, 0x5)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc0, 0x0)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/43)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:11 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x44aa00, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/117)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r1, 0x0)

07:02:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0x4)
exit(0x1ff)
sendfile(r0, r0, 0x0, 0x3)

[  356.791853] binder: binder_mmap: 22583 20ffc000-21000000 bad vm_flags failed -1
[  356.792243] binder: 22585:22590 BC_FREE_BUFFER u0000000000000000 no match
[  356.800549] binder: 22586:22592 got transaction to invalid handle
[  356.814074] binder: 22586:22592 transaction failed 29201/-22, size 0-0 line 3018
[  356.835160] binder: undelivered TRANSACTION_ERROR: 29201
[  356.887128] binder: 22598:22609 unknown command 1074266119
[  356.899637] binder: binder_mmap: 22604 20ffc000-21000000 bad vm_flags failed -1
[  356.899845] binder: binder_mmap: 22602 20ffc000-21000000 bad vm_flags failed -1
[  356.914032] binder: 22608:22613 got transaction to invalid handle
[  356.924250] binder: 22598:22609 ioctl c0306201 20000240 returned -22
07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
syz_open_pts(r0, 0x10800)

[  356.931853] binder: 22608:22613 transaction failed 29201/-22, size 0-0 line 3018
[  356.946123] binder: 22598:22618 ioctl 4b6b 200001c0 returned -22
[  356.994890] binder: undelivered TRANSACTION_ERROR: 29201
07:02:11 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e24, @empty}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0xa8, 0x5, {"1b745b3e9f72db7a1a26028e03ceda88a17fe4272f164697455127436222ac0d36dec7b7fe67b5ba7044a1b34370712acf2012189a7e0df8e38c522cf50c2a805d92f851f2e55939abfdeca1172c5333930cf911d5b90108f87cde8c53101de44fb7fbf2ae56535dabde12730c2079feaf7187bcebd81229fc1d71ffc5bac8f9e544fb07887d198951a4f4b97a86"}}, {0x0, "0b968aa1ad4e7abe5533301e0b11df8bc59b8ac481483bd0ad1bd01107dae6bfafa1cb344ed48e7209098e0cffdede3e1398d5de"}}, &(0x7f00000004c0)=""/72, 0xde, 0x48, 0x1}, 0x20)
r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="40ed8c9229d0cf083f2c1a6ee0384b88e0c9965008874eb6eadde345e15647d9c4fe92bfb98b32efd96f265f8d04eb29ee4b68929fe7fc35646fb6fc3a51b4a23316c7d76145422cc47c03a33574ccafed0298b8730b58ee25905c15033750699d45c673b3664a17a9ca4141b9fe0ac9ca6a93eed958a7252c53d345fc99c686d0d90a8035b4930043d7934ef3c5beacf03de5a1dcf5279f244b6e2cbc90d25b1d2b61f14ed381910f18", 0xaa, 0xfffffffffffffffb)
r2 = request_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='dummy0\x00', 0xfffffffffffffff8)
keyctl$search(0xa, r1, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x2}, r2)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:11 executing program 5:
socket$unix(0x1, 0x5, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2a4c94e5a974666f, 0xffffffffffffffff)
getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000540)=0x4)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @loopback, <r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', r2})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x100000001)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)
readv(r3, &(0x7f00000004c0), 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r3, 0x0)

07:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffff9c, 0x0, 0xf, &(0x7f0000000080)='lo-:%{\'system!\x00', 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xd)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_snmp6\x00')
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x20004001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:11 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
exit(0xfffffffffffffff8)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
sendfile(r0, r0, 0x0, 0x6)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xea}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0xb08, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6d8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000000)

[  357.082544] binder: 22646:22651 BC_FREE_BUFFER u0000000000000000 no match
[  357.083617] binder: binder_mmap: 22648 20ffc000-21000000 bad vm_flags failed -1
[  357.094490] binder: binder_mmap: 22649 20ffc000-21000000 bad vm_flags failed -1
[  357.109297] binder: 22646:22660 BC_FREE_BUFFER u0000000000000000 no match
[  357.118662] binder: binder_mmap: 22648 20ffc000-21000000 bad vm_flags failed -1
07:02:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='\x00', 0x1, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03630435", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:12 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r1, 0x0)

07:02:12 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=<r3=>0x0)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x6, 0x910, [0x20000480, 0x0, 0x0, 0x200007b0, 0x20000a28], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x28, 0x22f0, 'veth1_to_hsr\x00', 'veth1_to_team\x00', 'bridge_slave_0\x00', 'ip6gre0\x00', @random="4f13e9e24120", [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xb8, 0x100}, [@common=@ERROR={'ERROR\x00', 0x20, {"054ea057f9e23b3f5b3132648802eaf17bd5706a45524c822fd12e0ad4e6"}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"a63c84978dc1233f3bd30d02f64806d89e7150a083f6e759b65673200871"}}}, {{{0x9, 0x1, 0x8137, 'dummy0\x00', 'eql\x00', 'veth0_to_bridge\x00', 'ipddp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="f0c5627ff707", [0x0, 0xff, 0x0, 0xff, 0xff], 0x1c8, 0x1c8, 0x200, [@connlabel={'connlabel\x00', 0x8, {{0x7f, 0x1}}}, @comment={'comment\x00', 0x100}]}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{{{0xb, 0xc, 0x89ff, 'sit0\x00', 'hsr0\x00', 'vcan0\x00', 'tunl0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x12}, [0xff, 0xff, 0xff, 0xff], 0x70, 0xe0, 0x130}, [@snat={'snat\x00', 0x10, {{@random="1539edce7c3d", 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10001, 'syz0\x00', 0x1a22}}}}, {{{0x9, 0x8, 0x8b2f, 'vlan0\x00', 'rose0\x00', 'veth1_to_bond\x00', 'veth1_to_hsr\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe8, 0xe8, 0x118, [@owner={'owner\x00', 0x18, {{r1, r2, r3, r4, 0x1, 0x4}}}, @cluster={'cluster\x00', 0x10, {{0x3, 0x6a, 0x5}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{{{0xd, 0x10, 0x89f5, 'nr0\x00', 'sit0\x00', 'bond0\x00', 'syzkaller0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0xe0, 0x150, 0x188, [@rateest={'rateest\x00', 0x48, {{'ip6_vti0\x00', 'bond_slave_0\x00', 0x28, 0x3, 0x1, 0xd5, 0x81, 0xff, 0x2, 0xd10d}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="920279744d4a", 0xffffffffffffffff}}}}, {{{0x9, 0x9, 0x11, 'bridge_slave_1\x00', 'bridge0\x00', 'nr0\x00', 'tunl0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0x150, 0x180, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x9, 0x5, @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x7, 0x100000001, 0xf921, 0x1ff, @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x4e20, 0x4e21, 0x1, 0x2, 0x401, 0x7, 0x80000000, 0x331f31b0, 0x1, 0x2}, 0x29, 0x40}}}]}, [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 0xfffffffffffffffd}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}]}, 0x988)

[  357.130865] binder: 22647:22654 got transaction to invalid handle
[  357.146184] binder: 22647:22654 transaction failed 29201/-22, size 0-0 line 3018
07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0)
mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r2, 0x0)

[  357.182434] binder: 22667:22671 unknown command 889479939
[  357.213445] binder: 22667:22671 ioctl c0306201 20000240 returned -22
[  357.215770] binder: binder_mmap: 22670 20ffc000-21000000 bad vm_flags failed -1
07:02:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
finit_module(r2, &(0x7f0000000000)='/dev/binder#\x00', 0x2)
fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, <r3=>0x0})
r4 = geteuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r5=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003980)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}}}, &(0x7f0000000180)=0xe8)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=<r7=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000041c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000002c0)=0xe8)
r9 = getgid()
sendmsg$netlink(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)={0x10c4, 0x22, 0x201, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x6e, @ipv6=@local}, @nested={0x10a0, 0x9, [@generic="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", @typed={0x8, 0x8c, @pid=r3}, @typed={0x8, 0x7e, @u32=0xfffffffffffffffa}, @generic="9a60e51aaf7c86fb4d9c5b4903582c1f7a0bae2059e3fac8dfd33effc281f7169796a9bb6d085831a9ab819bc93d79399f24f59546bac40113a5600abe0d553160d50d42dcc6499bd6b6fb75b55603c8a315983905701b6e077a69875acd97103d16a995839605d6564ed0515c8beea46e361fcf9148fa356f2681dbc6a0a86b01", @typed={0x8, 0x11, @ipv4=@loopback}]}]}, 0x10c4}, {&(0x7f0000001440)={0x252c, 0x37, 0x408, 0x70bd25, 0x25dfdbfd, "", [@nested={0x1020, 0xf, [@typed={0x14, 0x17, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x26, @uid=r4}, @generic="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"]}, @generic="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", @generic="46b61b6b910755c82eb104e2bdf86c5f6fce45e53b30783994cd38fab68da0c5e5729aff688a88188cb890f27fa8d969ec15d97677ac24d6df0cccb64ac5759aa06f602e4fac4dd45fd24fe3ff7775873b4dae6dab", @nested={0x20c, 0x86, [@generic="c1246b53887863224bdd0406d73678b8654efdadbd3dba009c063ee00190d2d1cd8c22fbbdaad78b49e8d4736ff1de2160aa8cdf682190cf3e544ac5edb95ac21aed54acf32eb992d1677d4e5169ba4479563c7badd2cf3c2bb04b05dd609a81352de8f9e31d8aac0b1c2ad621ea45bd67223cc0b0fdc19e4975", @generic="f6319da62a8090e72cd07a153dc63f2b1fb2feeec97ff2bc86ba5239c15bb7a73491edc3b0b9dabcb77096ebc051be6bc40ce0f6a3c052295c7dcae344d4d6d70cdf4486f914ac454b558e24d4c9e35f104fb0359398701d9417ef4c0c4d8f7b2492c8e289184c9fb2a7db47c768a372a5c9d7ab102d5907652aede5133f21d8c1992a758a9a1061dabdc8a1ce3541967eec62aa1674f6b4313d194c32b49e659b4d5746a259395410adbb", @typed={0xc, 0x70, @u64=0x7ff}, @generic, @typed={0x8, 0x84, @u32=0x7}, @generic="9ea60ab0392618933d9038f46e042c48a23780d1a019e0956bbe90de7157bf5f451140e34331bb48250068f8cab2d17807fe928754febdf89af0869196fcbfbf79043f6db97549eef8e1370b9096672cc42772cffd4842110cacef3b2b00f26b8a3ffa75175e7358dc66be6ac1911759cd4bea970645bcc9249c9b2dae197eda1005aa5001908b515a4d88cd078d8ce5ee84c2d91d9971da88db7655023638e0369b3381a97bfdd48aad81b0bb4c490eb2846e5bfb108dc77cbe605d2e599feaf5fd1a452109f9bb6fd641da135196"]}, @nested={0xc, 0x46, [@typed={0x8, 0x3, @ipv4=@loopback}]}, @nested={0x28c, 0x92, [@generic="e908c440b1731d928d0fefddc2acee52af4d3270bb889151c8a54a9d2d9b06b83d4a99c7312bfa4b84e6c6089b16bae1314e796df8890668dd4228fb4ade0d5efd3f46a213b410bedd43e3aa4084139aa5eb76ef70a9b4a84ad803121660d551098567be9930d3629e9aec0ff19d61fee57b16912c13779e7f8db97ebe7756b13e7067a095f74c8c5c52c0834916ccad412fee362f546e67f98ad59a5cccf88ec19cbcfbdbeea7ba0ce2427959481dcb522419a375d70b63f0cc456131a73bf89498decfc46e6c", @typed={0xc, 0x1, @u64=0xfffffffffffffffc}, @generic="4e19a61ade28119e73c1cd09fa89a7020e68b4229668382660bc28fd1ee779656eb53372982c96d61f6ca058da08e8c3846bb8838e532e54308c7b6a0a881e2ebfe6165508b0920191d126f409e5fe1becd907245af63cd4ee7fe117b393d511c07a9bf846b463ed96cfb315bb4fcfa8c1179739a905fb5fd8787a1e1e35e2f15e0db8ba39c0e37dcd9e31784575c3ec4729b05535259ea4f0b08f18f7bf4867a02ed3e07ef5c9a9a01cfbe73246f30c0a3d1d", @generic="37b5f64fb14be4c6b294b15cbbb84efce844b440c276", @typed={0x8, 0x33, @ipv4=@local}, @generic="29b4513796b2ed194d09f0af498f7a97e8a1bd1a1d709cbc818d329aa782d39353e623e2c4081d6db126835effd9e7b6b54fc1f8bbd8ebb4d4c9f7a7ecaf786b1d0a8b15f95d5bf1822a24f41d14e47e011ab85853ed492b8874ce65770cbba021025505bc4d32ed683fda9d3c07b4fbd6661a16e6aa7d467484614f7cf78feb6b1513dfba8bc31ae138ac8c159ddb4e185b85681a279efbd84210873f12ca17f31af5bceec192fe102037cde5679db92c913cc86f004eeb7a67271293ca000eed01d6c68c9292c6ddf13bdedcee8977c143f20bcd4e67366ff738", @typed={0x8, 0x61, @u32=0x8270}]}]}, 0x252c}, {&(0x7f0000003a80)={0x364, 0x3c, 0x1, 0x70bd28, 0x25dfdbfc, "", [@generic="943e6f84745988b4d6319efc0aeb6aee95c5a50bc4fc185c99aa2a1a7af9e3e3d818e974284b33b03f17c9a1b7c7f2319f2fc71ee609be28f245ad8611a0c18668886b74460cb24521db9fd54aca47f047422e88f4d8261c492033ab5c2fb0c7f90fea8a65906e81bd6a9497dfafe6e6390924fd771257ce64ff5098259c9500c33dc498e6f5bc15ed2240e5b14a71d2edd2c5d86d00d4ead6cf5a119304d9e6a6acb323f1fb02b8415a", @generic="644f8bfd71e208c3b4b06a885517a4f32af928a364f0f417d3fff2b2659ab721d42e0fcd5bcfa02b541803cc47e95f7c245a256dcaab2f45433fe170e9e66ce36d735c4dad705b10fae2e5e29d904f40bb21df642c62a374a8e22c1d85f05b314c66aa9b44cd887c34a2ef5404057f7a00b5148eb2c08c3d0bef2566d6c8c20a903099da28c93458eefdc761", @generic="efb3b037e5dff23da9131b252bdc5614b76a2b7a8e2f639429974349f80ef4edde3a7a9180c1d91729b1f3438de5dcb4388fca5749cda23e718973338adbd845be620de5c021bfda4d380b13a650b424611c4481af3ca9e1a3710ab6724914c20fd63f8ee7d250c7f2265928d820fbe286626950f3614cd5254701be067447e15567", @nested={0x124, 0x33, [@generic="557a761f324f5c0a2bb2ba7e75807bf0ce6144ada8aae8fcb1bd332b6a43c1a18dab993837e29e4a", @generic="a303e7f78c1a3a58c4eb669ced4cc351e631890bb667ceb4a9653a4fa54b6e6ebfb04bcd4d6d2a429924bc8ecb", @generic="3dbc3b7476b3d7b00ba93cb4fd76bac1749910303a0705668f171a8e354d728d9ff5a3cebf514a3e67110f255de9e9776531d97ddcbd15c0b8feb3d8eeb14c197b970bffd849290f5625cc9d13420d8ceeb7ff57ae1c72a3703341ca89a439b24a537c8f0db094ad15873fa5e30b61", @generic="d6c5c523a2ac0a1ab0f0ed55b72c91121e5e8d57c687d0155a45a01843a2490ccb581236296260deecb26694c9be299a0c26913b4e3b95b7afe3ccc5ab2f96659ec128be553eb4e3cb3651c640a0dcbe5b31c6", @typed={0x8, 0x56, @pid=r5}]}, @generic="d39a4cf341871c19745bdba638c9a7f32a509eb74ba7fdd57c36af9072189a595222a53e21d459676da27b7cf79e69c5e8e3e4710cb7271bb899d1d9447ab6d882f83c572aaa5b05f39dad645314ff732b891733552b2f44e38ae0", @typed={0x8, 0x7e, @uid=r6}, @nested={0x14, 0x8, [@generic='gtc', @generic="e8dfb64dcb3a689ab987"]}]}, 0x364}, {&(0x7f0000003e00)={0x288, 0x2a, 0xb20, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x4e, @binary="e84648aa2c84f6"}, @nested={0x44, 0xc, [@generic="1c5e3b", @typed={0x8, 0x4f, @fd=r0}, @typed={0x4, 0x46}, @typed={0x4, 0xc}, @typed={0x4, 0x1f}, @generic='9', @typed={0x8, 0x60, @ipv4=@empty}, @typed={0x14, 0x6e, @ipv6=@loopback}, @generic="1b34cc514389fed2", @typed={0x4, 0xf}]}, @typed={0x8, 0x8, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="5523bcf76afb2e9252910ed805283e7b9c60784c681986b43bfb4b5894da14a5195acf3daed5b74823da78f48500d5c214529e4d00df5d5af58d39d73d6960feccb08062c4db0d73e6b411ed454565e6c89de82b150b90f2eb95bd8dfb", @nested={0x1c0, 0x77, [@generic="2c434b46b1553090469d8bd44b1a474686d746c2173f6c154740c6041f4a88877c6f205a80fea671cda603748c12a71691ed7b1d4c36969bfb75087dd631a556104f2281194a1f2c4db3c460880ec5084f0ec1ce8cc09e7bacdb8b82e443817f567b3862922c45a0442814e45a3594c1f690ab2a97fcf0991a2d27b34aca31f005b1bc27efda93709e482bbd753c7af2869cb8dc52d69d1f623a9335351a23f2d1ae38b996b1fdd731ef6fb039f2174707ad6cb4", @generic="31a5edff2f970f165c3171abdbcaac756ef73bff0e5e822f1eb6c655f5eb236a9aaaf8361059b70678128e5e121bb8203980c4ecd88d6f371267846176405944d81151b41b81403bd4d57576ed3c66194020fb62e8aa74ec4ac0f586b2f7b7dbb7c0532e2c756a9a5ecc8565a47ad9571f20f0432d7882000291644ed6a84c380e0c862d6f0fda2f7d82d4ab6297da3e5c84b4753909b1e00de44040bfb3f5b8ce06d5e56410c395c405e815aa15d56acbffa36ee7526c6842833e59c6d5c22f61ff8001dc38f437748b7f2fcd39f451", @generic="050005ca15bcefe41efc2c6b3759df47a4a8705f2dfb5d8ea1a864733dd792a17c8daae9188cf30ade04214a44bf584c8a7ba9eec116b7"]}]}, 0x288}, {&(0x7f00000040c0)={0xcc, 0x23, 0x308, 0x70bd27, 0x25dfdbfd, "", [@generic="5c43994dadd0b1ee3658d2c9249815755c3dbc56d3bb028aa3755c679f7fd4e1398a9d1c3508f577d020ce0ac8510b329af03911be61bd102439ea0bb3cc79ef095ea12e0bd2c48fec065da30ddad723cfa052070985f6e7b7a352931b0d3201abf4b2437b9fcc1a133f62a7b223766b7f5658ecd0c7660c512f87f215e385fe6c91a9317e58091b9c4cab2dea82ebb10bc5a78e31daf3e5b1a398d9c57c34fd0802f48deee00ac962069d7b03cf8f4cf79eb4db31ab21250c1265"]}, 0xcc}], 0x5, &(0x7f00000042c0)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x20, 0x4004}, 0x4)

[  357.234092] binder: undelivered TRANSACTION_ERROR: 29201
[  357.234579] binder: binder_mmap: 22677 20ffc000-21000000 bad vm_flags failed -1
[  357.240837] binder: 22667:22680 unknown command 889479939
[  357.267628] binder: 22667:22680 ioctl c0306201 20000240 returned -22
07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000140)=""/171, &(0x7f0000000000)=0xab)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)

[  357.279921] binder: 22684:22686 got transaction to invalid handle
[  357.286887] binder: 22684:22686 transaction failed 29201/-22, size 0-0 line 3018
[  357.296335] audit: type=1400 audit(1553151732.163:68): avc:  denied  { map } for  pid=22677 comm="syz-executor.5" path="/dev/full" dev="devtmpfs" ino=1031 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1
[  357.303743] binder: binder_mmap: 22688 20ffc000-21000000 bad vm_flags failed -1
07:02:12 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0)
write$ppp(r0, &(0x7f0000000040)="49b85beca1029e5e6d4335412b798e5699ca1324baffcf70b36d4c0d2600b6b0a9620a0c9beb986f46b7bae124f3627e76843b956ac0aca80b7563032122d1878837dc088bccb87fed2137d68f8782d252315855a4cf24748301514ac240f9d39c182c20e8cfd2986042", 0x6a)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x2)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000180))
r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x5, 0x3f, 0x72, 0x955, 0x0, 0x7, 0x0, 0x8, 0x1, 0x5766678b, 0x2, 0xec, 0xf3, 0x7f, 0x8, 0x101, 0x7fff, 0x7fffffff, 0x0, 0x800, 0x2, 0x5, 0x6, 0x5, 0x95, 0x5f, 0x21, 0x7fffffff, 0x5, 0xfffffffffffffe01, 0x2, 0x4, 0x5061, 0x48f8, 0xffffffff80000000, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0xdf3, 0x6, 0x7, 0x8, 0x8001, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffff9c, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03c7bed172617ca3b0ef06477e8276f1272975d24ff8575da3e12484d8d1de262fa53f8049183737ce518947b3f6271ab4ec63667c0647b57d5c7d0b4682ca572699398ec236054ed97fc540889c7082c6ce195b2090995f9b06a6e8765a7cdbf88e2ae3d944ae5c8ab5be8e871a6734751ca8ab6017e9d466a7a1086793c8804272472531575d23bbd9372c2d39", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840aa11ab1fe1b3b4fd32869a45e85da12ecd1cecbcabcff6efc8ce67d0c2839c6f12697b226f4664ccedf548eb03093710296d366fb179ce39b9352c4c6426e87bfc99b73dbf036e9aff9794ee8073d67a2ed52f1d6723e8406efbe6124bd61e4b19785b2d1458e7bc79e077419a"], 0x0, 0x0, 0x0})

07:02:12 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30)
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x0)

[  357.344429] binder: undelivered TRANSACTION_ERROR: 29201
07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000440)={<r2=>0x0, @initdev, @broadcast}, &(0x7f0000000480)=0xc)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x40, 0x0)
sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="7407000000000020000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000010000000080027000200000008001d0040000000080005008225000008000a00", @ANYRES32=r2, @ANYBLOB="080027000800000008002c000002000008000d000900000014001a0004001e0004000f0004001e000400070008001c00", @ANYRES32=r3], 0x74}, 0x1, 0x0, 0x0, 0xc0c0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)

[  357.422748] binder: 22707:22712 got transaction to invalid handle
[  357.424449] binder: binder_mmap: 22705 20ffc000-21000000 bad vm_flags failed -1
[  357.441722] binder: 22706:22716 unknown command -776026365
[  357.444515] binder: 22707:22712 transaction failed 29201/-22, size -3718769949167359726-1168412540762912237 line 3018
[  357.451429] binder: 22706:22716 ioctl c0306201 20000240 returned -22
07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_read_part_table(0x7, 0x9, &(0x7f0000000580)=[{&(0x7f0000000080)="987f60177a650195b19fb20fed422ace9ec1d21253190f3d22b82f1450543a820b5ec8a532aaed756c8da7aff2b1b1a44ab50e9a27ebe50d65a6dffdc2ecf05527188509338d3a629a90d8d977397528bccc175ed05d80bc08bc01642a8426162d30cae056e217714fc2982b4b77496f8dcd681c3c5713d54aa07e0b2443f009", 0x80, 0x7}, {&(0x7f0000000100)="7292eef3f51f57fb465020d2f23d1bb40a10a55caa0eaccc5179d50d9f5b238f0760b46a2636e921cfedd58816345edd4dd304db3e16c7d6371c402653a1837345b5cb90d25a82e4298649a898f0568ebdce26937cbf4915d057f52b0a67369441c7c70ee71580dc28d72245adf77f3be25d664f868bb33ee9ed786f389d22ae515a6381b62fd1543965cfedf430af5cc5dbc0baf563a2500848a47d284c00f8307100cbfa76582789cfa7762cc15826cbc300be75493a48fc5c587af67d309852b56bc527016394cacbeb7cb96e01ed5acf8b", 0xd3, 0x3}, {&(0x7f0000000000)="2b8e67c483dafc5203f98f13ebad", 0xe, 0x1}, {&(0x7f0000000200)="3def6982", 0x4, 0x6}, {&(0x7f0000000240)="ab8bcce8256e4a6958be9125ec8d06624f5dd685", 0x14, 0x3}, {&(0x7f0000000280)="1e43f5f7561b1271a08788c20da5864c5a4535441f6bc396bacf6a850956365d886b991fff51a083adbeedd26a482687db6b9d9334311e9ad510e25a92c5d8ae71e2a58438c89aa920ccc2be3d99f05bf04669c2d461c5f16f09b87b94d94351cdebf174661ff5b2e3b25362f52309f844cf7f210c05537dd2513adecb597670e335439b7b95d37ad24f65593101ae64fd49905772e6a90125907c3385d73dfef5bb9fe6bb9055faab040f7590f78f3c5a01", 0xb2, 0x80000000}, {&(0x7f0000000340), 0x0, 0x1}, {&(0x7f0000000380)="e32c4a2b03f61e70969ff9829b22d7695d42cbe03ee281d3c1fcb582184ae44e6eb86bdcd324e81f79aa7c103264aad08787b32245b3b8cd33d3f04955807e1542b51ee7599163c093296e511b43ec946cb1c36d7ae2cf2143907e0f0ab0d0805b6375ea4c1978d241ba47a18182d5d2db26ec686ddcdbc0943772e8534bcacc75df953df90560a882744885baf7066d29f6a40bbbd8c4d5d6d3649944ff07bd97e297e2002115ff101930ff00793aeebadf49ef362910c0ff2666d1621fc01b079c613259f4004697efa95c2cd1f2c75ec9e5232dc3d0600d337fc47e6dad1219e74d9ef11137b9d143fa94bf537fd2e37709003d4c79e7", 0xf8, 0x3}, {&(0x7f0000000480)="98eb24a61888a6e63ef8209cfd69729ad03248fb371f33a57b35715fb377fec52872a5e649098ae3790432fc807d8fa20bd73e5fe209957c0feb3caa3b857c9ff3cce3df2e19c3e35120e83fb67056e412e00da09ba1c792501a63b5a3e65ad2909f7bdd52d53e66a91e9694789f1d9b7e8e6f9166277e1eb5c1aa3cba9ba06512d0efd278355602490bfd8f317a783758d2d82ff3137e35ef86fbb61438d83bfb657f11b77c5c5f4c97e478eae59e443d01b74e5b78bbf07f85196f665d89e5d40db930e973e3e8fd936a6f8d583e8b5daf3bce80cc2e05e2a129b4820a9db4984c97927fcc4e90931f4acd701f6fb4", 0xf0, 0x7}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:12 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0\x00', @dev={[], 0x1b}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})

07:02:12 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setstatus(r0, 0x4, 0x4400)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685)
sendfile(r1, r1, 0x0, 0x3)

[  357.483452] binder: undelivered TRANSACTION_ERROR: 29201
[  357.511761] binder: binder_mmap: 22723 20ffc000-21000000 bad vm_flags failed -1
07:02:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="036308402663ecca21d3daec2add6a83", @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  357.529502] binder: 22723:22724 ioctl 80086601 20000140 returned -22
07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  357.561093] binder: 22731:22736 BC_FREE_BUFFER uecdad321caec6326 no match
[  357.611316] binder: binder_mmap: 22727 20ffc000-21000000 bad vm_flags failed -1
[  357.623343] binder: binder_mmap: 22743 20ffc000-21000000 bad vm_flags failed -1
[  357.625673] binder: binder_mmap: 22727 20ffc000-21000000 bad vm_flags failed -1
07:02:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x400041, 0xa4)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1163480000"], 0x0, 0x0, 0x0})
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x300, 0x0)
socket$inet(0x2, 0x800, 0x100000000)

07:02:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x840, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>r2, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x1, 0x10001, 0x1000})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={<r5=>0x0})
r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x13, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12634840010000000000004cda3d00030000000600000000000000f8ffffffffffffff0000000048000000000000004820000000000000d7c1546949c09b762da6e2a145d6cabf728b6c9300005e186e8484bdfe72dcd57b0392216af1229bab600c4d23ef07534bdb43d7e20c613e50a7ba4883f5783cd3ba528972925acd4a7b2ccb8fc2108c913b121f26d7a2f78a51f2c666ed560573fdf0492683d0210aad8681d62ffc1e3c06a172c6fdfc46ec0733e5a47d6036c6e1e6f8f19763b40372c872bb", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a627300010000", @ANYRES64=r4, @ANYBLOB="0000000000000000852a6a7700000000", @ANYRES64=r5, @ANYBLOB="0400000000000000852a68770b010000", @ANYRES64=r6, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000048000000000000004800000000000000400000000000000018000000000000005800000000000000380000000000000000000000000000007800000000000000"], @ANYBLOB="0100008000000000"], 0x0, 0x0, 0x0})

07:02:12 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000340)={0x14, 0x49, 0x2, {0x20, 0x1, 0x2}}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
exit(0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x5)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xfffffffffffffde0, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x40c, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0xfff, 0x7, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x4]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x100000001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xffffffffffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendfile(r1, r1, 0x0, 0x3)
r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000280)='SEG6\x00', &(0x7f00000002c0))

07:02:12 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xe100, 0x0)
ioctl$KDMKTONE(r0, 0x4b30, 0x20000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r1=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1)

07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x100012, r0, 0x0)

07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=<r2=>0x0)
sched_setparam(r2, &(0x7f0000000180)=0x9)
openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)='*eth1\x00', <r3=>0x0}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth1\x00'}, 0x18)
ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000280))
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x5)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  357.707875] binder: 22763:22767 unknown command 4743953
[  357.719311] binder: binder_mmap: 22766 20ffb000-20ffe000 bad vm_flags failed -1
[  357.720991] binder: 22763:22767 ioctl c0306201 20000300 returned -22
07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x3, r3})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x8, 0x1, 0x520c, 0x3c, r1, 0x3ff}, 0x2c)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r3 = getpgrp(0xffffffffffffffff)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, <r6=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8)
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000780)=0xe8)
stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000880)=<r12=>0x0)
r13 = geteuid()
fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000940)=<r15=>0x0)
r16 = getuid()
getgroups(0x5, &(0x7f0000000980)=[0xee00, 0xee01, 0xee01, 0xee01, <r17=>0xffffffffffffffff])
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000009c0)=<r18=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8)
r20 = getgid()
sendmsg$netlink(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0xfc, 0x13, 0x100, 0x70bd25, 0x25dfdbfe, "", [@generic="9a8312182bed24361dfc46e4b1f98e790df1c08884763ec919f54cd158256ca8ad28ed8b9a4c7da3dd16f4829ab51fa0a076a19a75f18d3139cdbbf1e9325cc0fafa229ec64fa47d350653c2d8230a003c4578c7852dd78757e9af6e7a110bdd8ff1a24e589124676683e31170262c4bf96cd14834a4602b0965661db8207bf84f8f39cd28c4e1fef3b1adf30499dff10c1b2a83ee95a28f10c720a6e4601405a750d10c928252903f532af17bc587613ccc827da282e9eca3a71eca8efe442ebafb930c01579c80f9605cb355687768fac78dbc8ed7e963c9279904f31abc81103a6258d6373b6c9a4fc75d"]}, 0xfc}], 0x1, &(0x7f0000000b40)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r2, r0, r2]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r2, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x18, 0x1, 0x1, [r2, r1]}], 0x128, 0x40}, 0x4000000)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0))
prctl$PR_SET_TIMERSLACK(0x1d, 0xe78)

[  357.735391] audit: type=1400 audit(1553151732.603:69): avc:  denied  { map } for  pid=22765 comm="syz-executor.3" path="/dev/zero" dev="devtmpfs" ino=1030 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:zero_device_t:s0 tclass=chr_file permissive=1
[  357.792595] binder: 22765:22784 got reply transaction with no transaction stack
[  357.800318] binder: binder_mmap: 22785 20ffc000-21000000 bad vm_flags failed -1
[  357.826335] binder: 22765:22784 transaction failed 29201/-71, size 1207959552-138646913024 line 2926
07:02:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="51919fc1d26e69b2b40bb377d690242f0b92191d7b13312db167ceec3458edd775caa20376087050d8e611c21057dd87ae841b4ee05b88f8e5f37354b1bf2b91c415285016686ce929", 0x49}], 0x1, &(0x7f0000000280)=[{0xd8, 0x11d, 0x8, "f997eb7d32c1501b8302dc86ccf860dba0e7cc2c415911c3eca3caf56862b7de369c83f657fc5a302bf49d1f4ed5b6d64ece8d7ce58d54e079e503bb087bec34f9ce3a36125eae5cf01b24a482e733f241bfc4aaa78e2063e94c3e0903e1fe2690d21d3480f065d5012627735bf60adf45a91a4c38c60cc55b97c729f46b9a0e7cffbfe53f214e3e15ce6db40b5a461115c9c083347db199e6f28b5ddd91e644dfb9114e63b9b8301578d37d9f5e9358f267eb5d4e7e988cc55b4b9cd36b0d0e1ef40e0d090f55"}, {0x70, 0x1ff, 0x5, "25dcc7592c5c85fa81b9c49ad992301a1de2b37c147d762d5538419662dc5a85c62d7c1844e55762e6385308b89da6af87de1c7c8ad7dae0fd4dfaa09144ff0e6ac1c08222d5d6e78908aa32b7e2dd84f044ab2e26eaedeadf4f"}], 0x148}, 0x7ff}], 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_to_bond\x00', r2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  357.844845] binder: binder_mmap: 22783 20ffc000-21000000 bad vm_flags failed -1
[  357.854409] binder: binder_mmap: 22785 20ffc000-21000000 bad vm_flags failed -1
[  357.879582] binder: undelivered TRANSACTION_ERROR: 29201
07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/228)

07:02:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getpgid(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={<r4=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xe, &(0x7f00000002c0)='ctr-aes-aesni\x00', 0xffffffffffffffff}, 0x30)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000340)=<r5=>0x0)
r6 = getpgrp(0xffffffffffffffff)
r7 = geteuid()
fstat(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002380)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000002480)=0xe8)
r10 = getpgrp(0x0)
sendmsg$netlink(r1, &(0x7f0000005a40)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000059c0)=[{&(0x7f0000000380)={0x32c, 0x3b, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@generic="5d6cbc6a038e8b4d34d808ee55956e58f1f854d2bf28a29888dc6312d1824f0e2d3cf000dc8a83c3f263aa43ae28af905f69c5702051d222c93106e9a12130575a2d469f59b1b19df1cd3e25bedcfafc46abd0afc37e422b422c6f45219bb934e084588ee66ea85fecfd9556488a934a2a9e90a675", @nested={0x10, 0x24, [@typed={0xc, 0x5d, @u64=0x2}]}, @generic="ef4175a7e52de5614488226f63d044aa4d02c27f68c47b6e786c2f2d3ce11438d5f52e6a937ce6928c4395400e522b4e952a1deb8e2da9c99318346d947163d8572ea8d9cd5021d9b7c798f7edc4cfbe59b07a24b28d2b", @nested={0x1ec, 0x62, [@typed={0xc, 0x60, @u64=0x1}, @generic="e393631259057864b7f0102ba9af287d04d10b915b964ded271c9402ec599303b6dd3947", @typed={0x8, 0x63, @uid=r2}, @typed={0x60, 0x74, @binary="4fa5fd2781221a230e7f0f9addd3db12a1e4d6b768261e15f6cd83e31767c3a7eee6559df8643de3683abfa77084b2aaab42e2a18a9ecb7f12a846be9ee036588b220c06a1e5233ca32ade810447e9bc59c34fd73551a2b2f4"}, @generic="bf5371c2c05e84c40d35f7ce443a6adc7fa5a6e88b6cc97bf1db9c4cb8d947ba7f09e23a869189a8775416cd4484cc5b50b843bf5900cd76ff9c8799eac176b645ef88df7d16367a75c0c2f482058e27aafe0f2be68f03571b940ea1e7cea20309567020b4cdbab2219327265a1c5e5ceef8b27e4e68547d134ad72bf596e953598a5567ea95f3e119adfc3c9b0ca448c26b35c0cd7c03ecd38e6a82b97bd0d7cc925f2b7d759ecec8b577427ae3adb12f6a6f", @typed={0x8, 0x31, @pid=r3}, @generic="059dfe26034b63f23b085f177aae0ef7368040a1f53abd0fb69ec0a3ab87cc65657d0175c2c1d0f64ffe4afbc8ab74df286b172925454b0fd85f752f5cb3740075261fe0d7b38d5cb005ff427183ddc6f05062671366d523116029ff7772db71dbdd", @typed={0x8, 0x7d, @pid=r4}, @typed={0x4, 0x65}, @generic="fc6460d7044a16f2685e6c544b11ed66f7c8d28a0d7ad0150a8317412c664e1e603799b3"]}, @nested={0x18, 0x55, [@typed={0x8, 0x61, @pid=r5}, @typed={0xc, 0x40, @u64=0x9}]}, @generic="f12e90178ffb0f22800daf12a78d597e94d33323da480477006248ce534d0365017e2c811ed2a7c4f4bb12068d4011a30eff09b0f2c51bbb0638"]}, 0x32c}, {&(0x7f00000006c0)={0x18, 0x25, 0x18, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x8d, @u32=0x8a}]}, 0x18}, {&(0x7f0000000700)={0x11f4, 0x14, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xec, 0x39, [@typed={0x8, 0x54, @u32=0x1}, @typed={0x8, 0x56, @pid=r6}, @typed={0x14, 0x19, @ipv6=@ipv4={[], [], @broadcast}}, @generic="5e9f28d9e9099a57a5498481cee704123dd77eb6e2e8a36fd7c65318cf8a8df97cb3f8d7c6d78caf8164ee87f67a69cbfce6dd68aff61eae76c7b1d71a704b3f115f99463ed804c5e7e6ca63b9a46827abab753e494a252631e3ddc483160583c741263947f4c64a00a221d55c514180d29c6cba7f92765849c83eae47159c5bf42aa797ef19b6ad2e6127604efa28baff8bb953ae061fbc06f56708bca962583991fdaf3524f06fac7d8e37966934ba2946bec8cf8d11b9f657370c14ee65234cedba"]}, @nested={0x103c, 0x79, [@typed={0x14, 0x1, @ipv6=@loopback}, @typed={0xc, 0x3b, @u64=0x9d5}, @generic="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", @typed={0x8, 0x76, @fd=r0}, @typed={0xc, 0x90, @u64=0x1000}, @generic="ab1c"]}, @typed={0x4, 0x29}, @typed={0xac, 0x54, @binary="551e014b5eb03f32f50eae77ff1a8ea2997e454b56d6d42cceb1dffae037fd95b4d446f595f05f81672fc9695b11a1caff389173f6ac2cccebe73bf45c4d3419879c0478c0e8ecd1955b4c5ac5102718492f0fc1be0d56155d10fb55eeebd4002162920378c043bfb9dc93928261070452128f034a0d3b8217dd882cdcd45e040422e04e216e76791348d9baeae526ea7e1303595a0fa0e1c2f410aea7577018395c1db63c69bbd5"}, @typed={0x8, 0x7f, @u32=0x5}, @typed={0x4, 0x22}]}, 0x11f4}, {&(0x7f0000001900)={0xe0, 0x18, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="1b5ed7094801d2b01431a860883cc030bd8da73feee16781b678c4d0cd4a31ef925e7616c90861f3630aab8279c73b3e4dc0e29652f9dd75df0c9ea44a8a86198be31b108fcb64164307d3a7434a026c8a78400a914cdf062c7a64406b865c2a26f07f7fa72ee8eaa2be99e6cc5e0c6045ae1ada03297287efc0d0fea0038aef26e221c2f7ece42660bc1efac1c3c34da1168926a3bff0ee2492ebd1e571b7bffb6440e6c87474d99eee1c20cb01c655945f3e45ff2d94da4ebb57a4927913ef35c6e7d8b930b243f3a76235bff07ade"]}, 0xe0}, {&(0x7f0000001a80)={0x788, 0x33, 0x720, 0x70bd2a, 0x25dfdbff, "", [@nested={0x29c, 0x4e, [@typed={0xc, 0x6b, @u64=0x3}, @generic="9838212f9beba868e9d60fa01a8aa6ca2c7752888044d62b8e98c150822d320425a3c1067fedfe", @generic="153b8945c33d6a19fc34c2cc7745d53b24d3c00c24465cba5d4dbc06dd5bdf8155ddcd1a4ae56f2b2c350e45f51f6c2f0ce63f03bb31a854bab02db97d0f4a62b0b3384b7614dfadb2948e227d0daca45f5a0df83720ffefda5ea03982d03a7db8f5efc69dc32140f31c90769709423606e8a80aeeba5780a4", @generic="a94833f2106cb3b45cb0cefa3b5039539ecbcd54472b179589e13414cc7fbcdca923b1f3d43dee1741ad99e2923735e0530ce22009db4bbe1797ffb91dfbaf3aba1272d32c3b7ec38324d2f532ea4ed9d475732cad15e3a3ca3c467aadd8094da4fe22a09a1fc1e218ffd53f909148d548c61e2540ca7660482a8560da05de0571348ca50f4d64fa2fc147c0df18a4dc511d699bd1cdb24279516d3acfb8376139a0d2b9313264a5ca835bc621451addd7f9bab78b9edea0cb5f17188cb471cf75b2ac136ffac7a68572aa6c2587fb5ea80f6ec17979bb993fd91e8b2f2b5cc961cbce8e", @typed={0x58, 0x3a, @binary="0eb3558e47c054dde0cbf4e8376793e222828241983587101b34bbc00f13f80fcf39b272b89b9b9eff6e67e008af46b3e479e82f4b55891d79a105136c8346cbd005d2b6cb2ad23ea16ab7dd54faf92ef5236b"}, @generic="3bad3c2aeb8a026d67fab676b3b9f4b0f29c2112ee15feec142f68d4b271ad43777e19f89e1f40521d3dd9c40a79535073250ca738744f81c2b3f00eb6b145057acd7fe6790bc2ad6074f9538ca1baf3009f481fd30ab5ca38015c5d0805624f16cd091920599f49322a7f2a5298505654cd62bb7cf5bd31c346c0cfc957a529856af8d669a00cf948fa044b6e64f128faaaaa156b72a575f992", @typed={0x14, 0xd, @str='/dev/binder#\x00'}]}, @typed={0x4, 0x92}, @nested={0x16c, 0x15, [@typed={0xc, 0x4, @u64=0x6}, @generic="b9b970ef6ceec890085a32e965aa0311b07eac20fb6e2b2d535f88d8423c438ca91c687c64b4a60517064dbec8a592c8965fe25ed46eca9103702c2a53eeb789f505bcce7726e716b02da887206ca90ca26b1c4e3f4e518be0fcbd1cdd8843cc59b32ec41ddb1cfb41efcd9848676a9221beee3970aa2fd4cf95101792fd041c12cd380375bbfc6772e6cc7fc7207e7724713e52be588f9ead74880a1de80619531384c6f963eced314c20c57259336f53a3a24c0d3e92798964e60f93cd0571b0f058b16f7e126a7d87aa5abcc9eb57bcf26bf5841781c617fcab5a50af4438d044e4c3d4f7533173e1ef3825c6a188", @typed={0x4, 0x2c}, @typed={0x14, 0x89, @str='ctr-aes-aesni\x00'}, @typed={0x10, 0x5d, @str='skcipher\x00'}, @typed={0x8, 0x1c, @uid=r7}, @typed={0xc, 0x77, @u64=0x3}, @generic="b2a4d6bafca04ddbf914cb5cdb0689f96fa96154ca953c01adb485f26dc28876c8a42ac07ddd8a", @typed={0x8, 0x9, @uid=r8}]}, @typed={0xc, 0x6c, @u64=0x3}, @generic="a022e8cb47c283647239a8348b76cb8e6aa45ecaf20056c42d38b1583cb8c306e222f61de999867477121b9937605350ab", @nested={0x32c, 0x57, [@generic="064b812ac7f6569918c3cd597cfadb179b8f00456a981b98549848d3f1966a64731cdf8663d1134c15afc98ba0dbc575aa4e5082227404b0bda0c61242e9653d621e2a7db19e3388897c1b6eebb60987b102c974c2900642c1d198662741bb05a5a5e3c0f85bcdc7b3b02bd1cc78cf983aec61df8029fa18ae229f1beddeeac9ce442a47c3ff1550bf490d587d7660a54ccb155e2da4d49037689433bbb5597dc11299", @generic="135bed5e792f", @typed={0xd8, 0xe, @binary="45c643cdb9c6b932ce6c821ce864f8322829abbfbb7dad761cf5d7a639ef19058a29f63ad00816e94b3a58fca7cef61c53457bb62eb6150b30e9edf8d223c670b9f31e84b586b5859fa2a2364dbbc59e0382fb2db9376111cf7f2347c219948e9f018355ee176a344bc1cb64cfda7ab0ad9559b55ba12a9adf1f6f84526d3050da6c9327eefdde2d84ce3aedfef6aa7e2298c3ba1a26c7b05ea14e0b5bcad163a6e2bcec6e118d0217c5437c53d9a89f9a10c743485680f22a84b7106148a2b68a919f08e7c3376e53afbcb378dc2c844bc8f3"}, @generic="d1a1bec122759e28b3373b1760d208e40e6a31ac7bcdd69b18bf7da23297ff85204e06198706a91360c79c8c1480dc92a6aa9195b818bc9d6dc436660b86b888cf957e26a40f150b53bbbdbe505d639138aa176ad1d1ba054bf50b132366e431", @generic="873b06b02dc163dfdcbb435b587792e9bb08e5dfbc03e1af75fc6690c759b3dc8e37a7a6a7a1b20536945c73b3f0a34270a20c130adc18f3113a2c8a798e36c2b666292ec2dbd174dacd0b0d975aeda0c24165a23b07b6c5527faec0255d317e303bf8f5801da43783f847ed66d86ab7a92279d351216b7c69af156869eda4", @generic="89e6ecf440f433599b34dfc1e46547643e73325befcc3a5b2aa8c389ad18a2003ed6ece0dc42eb8e069d5ac50f03dceb9f263d5c3bc0b832cebdbfee951c3375ef9066a15b814e3a98be404026f3abfd48fe04e1287a4cb8e64c54623ee57df69899e59886735806267397729964c251ebd21521a47b06cba8dbdaf2ddf6e37f2ffe5ed9db2c74a857229a8adaa39220ef03b7401d513e55eac47071a4fe8fd63036f78f48a8f242b52c49f9281f5fab200b9edac9dbb1f54fd9212a0c981a16dcfb2c0f66"]}]}, 0x788}, {&(0x7f0000002240)={0x130, 0x41, 0x300, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x4f, @fd=r0}, @nested={0x114, 0x30, [@typed={0x8, 0x54, @ipv4=@broadcast}, @generic="6c00bf9d2dd39e3966690b9563609ca2d64ee8b43c5e79a003d5ccb6aba483365c6061492786f10e7b5390fe35806b027505a6a82c640a23b052e84769f8a0021d7ca4a1e04bc2055a5fafc9c838063b6c489283ef3e336aaaabbc5e90a1bb6bb919559fa984c2b6eea1316e74c56ae34e67b376864439305b8638ef14854c5dbbdbd9d48de945248a72b155cb171e577e5e0ba7dc42e891f42b98c903637edca966be317d6b1a033ab6a892cea4bcc5afb379fa3dfcdf784ec36ec12c5f5a98", @typed={0xc, 0x29, @u64=0x80000000}, @generic="9282e261ac22633ab988be0bd233ec5439b58c45e0739ad08c4a5b36a54a66fd8e29888b0cc70c31556c2457bb8f24666ff2b9188ce704ef6f80d4d1"]}, @typed={0x4, 0xd}]}, 0x130}, {&(0x7f00000024c0)=ANY=[@ANYBLOB="1c2000002a0000012abd7000fbdbdf2508008500", @ANYRES32=r9, @ANYBLOB="0410300062b02298b20ee92f90ec9088a51444fd623331db58eee0075a54a2adcfdc6d50d04b533d0d47265f2c70c10d15eeaa96937c7f6157006141bc6d729fa6b8f7cae71c68dc3cf17396cee48bf929624c0b86dfaaff80304f4178662a301eb6d9ec92af96433b9faf41d64d03d59e53d5ea34d4efc225f699ea2ebb224d8f22bc72cac76c2574819c251a7bd6dafc60bcf85cc6deb41c1c10aa9260d4f34e785b76aff6b649e7372dd3ab0b1f48d64d0a6945907c8bd42e69e330ffd5c2be1eb262ea7a957a7da2da8a5e366d48000da01a19f02123a81e5ac3d79e73042c5f1145981a828d90a540003f9e744cd53720cde286acb99dbeb85f237a4bd11d2b6abfe0aa0756c9b8b64cf6515f5049577a2025db51266e7ec594d31323ede9065e6c845441ad2fe8ed1688c55717b275859ab5db6f048ff68e8f58cd72de8aba908be25582d9c107c92a7ac2a9dee8383ce7081a871387f94f04378a4f45137f01f68f499698a1b29fc406e34a7898d12d6031cbe0f1c9738fc3c623abbfb0782763d379f87934d64c65024c12a0ac9bc998b5b35861500c4b9f8899588040bb923a6376c9186bc4afdf4e4f2584a6c87398738e6f050d56f8593205a4a674e5a7ec7b11d3f3f5c0fe4a2a521b50270f4feff46c5df6279f061543e7f4791a33faf454cf7c67031bb92a4f22faa9aa77c50ed3c2a20e9958b27156abc3cb07655b863cd540c44685c2a8cea44e1c784a74817bea0bf7235cf20d8c2862dbf4a24dc7b671f5b46ba8edb7472e5cacc9f928cdf13dc480647b6d6c69ad68dd860009949f849d3cd75bb1281abceadeab1cc79b59d2b62efaaa9d7fe7f4bd18a4cbff9e982bb339227128dff0c712f55a577c6429c125ef8781b9f919a89019550622fdac8508ee38f0d2bc348730c0ad5a0ebbdf52db5079951808d274ecb859a466b1b41e8f9552c4a21983149282e28cc6181a0d764a49ba0527457880443a80b4054809d2aaa5bc97cfa736da43fa4acfdbc06ad3f9e98eab2d064ca0aa72e3821ab66192d278c3c421901ac1f1d9d72c56ba3283998314c64b8b2415492205ee75058a0b8945c72c5d7d75f4991912cea117b96014f3af68f3a7a4660d3b2bac5efc1065889afde75144fa7162e994bc67b7d7949dd3c66cc456ba32890bdb3ec1e773cb5425a57bad0addfa3e14a6cdeb1b4c3e3bfa8fbad5a2658d080a15dca845612880e7b0f793d14644066f1feb247ae95121b8e806fcf213b5fcfcb8c301b96a6e54d8749741bf70c0438edba0d7d91b8998e4c77f2a8aa666bb7b3de5f011622c9c5743c092cb7b53d4f0958b6ecc3c32178ea1c8daa3d35aa501e4835661b0a617fce87e0c0b8ff1181668e1e6d129fb9c1e35805df252f58abb21ada355b8e407d036f3ad7918ec4c463b7c38cd0fc2e3dfc3624dbae89b02ac6c128fcd844aee5d32f3149ab1a9bb11959d6104759018df3e205f62211b697ec1fe49b2ebac55d4f1fa9246c2f48e1d8a1aa0cb59078c27a0132b3839738b96e3881036343e98b98cf0bce75064dc00d1ea1283898264add817d159cda902a3702d0ac05b1184c0bd38897af08206527e96579251584cdcd9be83bc332238a8bde6a2956f9ebdcaa69f4d2b4fbf7ef52485b43f7debd3cf46e101ef284d4643976f3f5b775761f496ef9ae7748511d743d93fc2c7912647f4c2a7868993f89fef34239a80765489b781b9a1b6c8b4fd7e49ac18869f2d99b5e297b49ba9471e38668d6cd917338cf0f1b4e52313a2e5c9dc8df531085e9de83ec62266d146f0aced31565da514a881dde6624d6a7d8f73842c9d44ce93a9635a388d1af5e43cc69be66bd71f35d5760ec8953d6415b34e9cbeb485e495e37f1f00dfe66d66729fa4d1025e2b8050ebc2a345fa2a4c63c23a4343bacdc2ac7fd77be1fc9a86e2ee47f09c8f12c82bd93695464d66c214721145c32170043428b1e02de0fdbe31ffdd9368f8d9f34ac32a027d2d960bcc65249d7a2a0d7183376bf6085dd8cb5a33e66c280ad211784af3ebdee96662ed10838b8c9ab252f0ae6b9100747c8f27b3eb1fa0eb4778d73f8893edca9002178b14ae0deca12f3c8fb474cd57b2c46cc07f021786da78a231f7a20874de3722bf0f3fa8f572fbfb0c1b7b5b4bde8ee0cbbaeef022ce60a15d7a0a41753ac2db7c1bb96d887533b6715c80b9bcf36c6212c9e6dd435bcb7c276f65c87f330b4c1dac6c0f66733e6b55d4011a8ac81f3761f1f277998db4cbd72d9919cc33b4a2eed872e1c4410a43b2397d8ce0fcd7b9755208c88ea82af5a094722c8ab8ab1c7f4f4b652da8f2064c3899b662b6e58312bcc4306f7645f62fbbf7a3216f1b484ca0a8ec708401945dee633bf0b82cef55765ad1b8c3c6fe74f352476d3ad89c45456af5ab6f7fe9901c4cb988eb09d21a1a44e79d1f73102937e681837bcf0ebe0b7e71f837235195c244c70f0339bffe2eaa1eabaa6cd5dcdddfc38dd6a7e9f175bf7f025aaabe8332e6ca56bb21cf92ff6bb600566691eaa702f0e15db6d1ba0a7db58149155464050194d46ed9b20f9fb639e3ddffeb372afe378170f1eaabbee16d7d71f5805ebf230171c65143b2aa1846269aff2e5c0ab9242d2daee914efe72380f72b9c0a9d4fffea1223618f1f2ed086d9e98c20989bcbf75e8c4a3ea2ef4c9721518d4fd9218d226ef472b765bb2385637d691514cdd61b78693420d1714a14045ac4152f9ade1187e1baed1ea20718f0d4ed5600345e663d1cef2a99b9149f7b7046d6f0d44ee1f31cc6e335e2f908739b591f256399204aff7ce45fdd6557a2539cc10965c67f41acceeb5174764beb81e77c9740715d1bcf9ee49ba8d52b1d2da440d2e63d9b5830dbcf5e9ec95113d3f4b16f11cf30b8a832531d8b0569534714fd7ba8776d71846abddaab68fcf92054dcf8f3cc24d78565c6beada2db121a8e9fabf755e946dcb26aadd66848f513267700c798e0a9e81053f1530eb822950c4ad8650503bc0e79a402df0af1e099891715dfc539adeda07d488db746ba8f5ae8a15257bf63c09e14247f33a7629e79fdb5a1a0c02dba111f24752296c3ced33d162f589e3bb0cb2613490ad7c8d031f1ae486711c529cf936000664823348726d38d145a3df69142326148bdca7010da491d5f078d109c162f9b0fa1fb7ae792b8dcc65006ce1238a98f4cdc9c988357b9ac86359a8af96e943de4fb4c7fded6dfd331298a0b25153e6d6198f21ca2979319537873f4752039544938d1fd6311fe2999bb398bc24d98042825dc63704ce3fd2bf23c7f42753b4ba4a0204bb51720c003cf5d97839371dc594c48e8f66c7e6e852b912fce27292cd9c3f2b397595eca1d5302797b0fbfa853651eb480b34dc94762b98ec88421b760530735fe8e18a9b433135ffd403382709445a5c685e7d8d3c7b04d6b5df692fda49de3fd3921b7136712716dbc386a9bbd96f22bdef73b5c854c25c4ba0d37ca020364dacf41ad33793527b9eec130864032b05420c19e8472e7883534327ef86a0f57c0e9fbd640cdfbffc802d15221721f648ffc5f8ef83fba3aefe4a9f3a4513661aeb2f297bd0e16557818109b56d5d039d6df0a3d3a6f467a35becf530ddc0838f2936ce2fb479439d8ab02335cbdd32a1c89749849e4bbb670222bfe5ccb7878257ab2aa7d6d9f0b6b93eab2968f2208c74d57911d1e9ffc7b1f3b4607777aec29c952bc09dd5c6cff2cc6f27eed97e765076a2dfbd6fc34cd989bc512a7ad33b2fb5bc536b8e6244ba3308ab459735c11f781e5cd8bb97826bbedd55d83afd444727d3cc21aa462b818345edbf3b8c35bfd00b997bd5023c55f0f4623be52a23d0344fc3e1993c6c9c7991729ab9b8c7cf0ae06e6e066d5a4027c797741cf8d99f672195ee832859c59b465265a088855768b9c976d880d1eec77f4e9e540f2a1a62bb82d33ef8560022eb4cb6c2267535cfb59a98338e6e8d81877e479095760a96c1f987766d8bc68201710d74d18123cb1cbe988573150084711d45737bbbcd5653ae850b3ceee19b278daf863fcd0df2638e017f7997900d1ceaee30f00dea62189bba72ac512ba8d9cdef9931d84bce3a6347cd2d18c3881102a4feafaf8633104e83461bf82669dc4eaef0a1e8096f987b77337299a87eed42ad4a4297432b785b52a233c0c97974622a56ca640c3e002675349728ae1450d22cea7501db9c81e0d9a36cb33850863ac4172d3568bcd8b5ef8a75c4beb7ff96b30e09a1b95996239f93f6415d784ec0ebce6961380ce46e00e359ee392ecb10ac33d05c1762d9e04aadff5ca565713b17fd86bd099e1883d7a59b43f6e39f8b6ced1fd37940a2fd2deaaf1d5aa099fb8172a5e782148f1927f009b0ceee618811f2f0d020e12f199e5871f34215a6984f3bbc6b71c645d79a28aa2b2980c56c9105a11aec277e346f76d70b18a9c28a37e1de6e0e9e45bf801216083e10d9a79e73286b0f09fdeedc9b6aa7d8f6cddcdfe7906836dfb7ae8a3ebd1e1ad64f98f63673098324076f4577ea3bd843a85644cdd6c76ccc4d4a454279f5c48dd9fbd9c92956f937fe9e0c3c0489f51d3c3fab9b50c5888e6c3f40ace0463ce4a1a0b597524ceb1500343451cf3ff7b753353df8df2919c7a66eef272661f03ade270bd912b0890bc91608470edb617f1c7a4c3879803c230c55b54cda554da9d7ad10422166f149520a1d140237cd88662a4525b4eede69bf00f39b34ef4512380e087a4c354ea3aa6d9c5059cf4c0530d738aa884848dabaa5e21f3a60cab16444ec5e65d6de3d491916927eba5e14cd8c3ec78ae6eaa1c20667edd5648ca0281a2acd67d904d087dd25edadec8a3f91e71c6ff44c261bc886745fb06b2c5a1413504b935dce9a8e3cb9b71d9eb93253ff2f35f380fbe6a218decf0f8a38f52e868744dbb139755807cce19395aeae5bc9951ba1652533ab466b2954d812061fe12e4b4ae6f898ccff855c9516a019235091577f5bac73807777b6fb67bee4fa008f808012448222f91122f7efdb649cf88dd63d2eee99324e4a9f7fbcffb2413954b14a451cbe03d5f921f002a5d3e49bc44d778a13ca0f419492d8c0efbd2f19384ec76e38648d4ea4f9dc926783e313dc71eb84323301bb50f63e82fe1725ed1b18f6afab12baf543e17bdfc63bfc7c32730b7f74e6b110bea1d665adfda02a795e9b04278d9effe1170b200516aba98cc0a4e9fd83e9bfdd2f9e6ccaebc7b3ea0d40252d552556eef642f280d2e2535f1cb715240462286553e2472f7eaef504c040efb86a2b118fb5ca28340b7f667865a2ea5f7f24d829e2e9d1b68855ea3cbd76a06f132277e1d5c13dcedfe2efd8beb381b6b047473e327aafecffa219871460f27fb3d2d5ef51e2c3bb574b4ede5647fcde91dc684b9b28cc6db56076c1a73d3656ed373e8a5f2974ca2be1ecd4b586c2c388fd4472e9683ce747749a33168a62af140e33a363c2d07842f26d021767e135ded37c75db5bdccd45baeefcef2274900b491a026fd1aff20a817215849922d2a77860322e36c9799de90cce63da0cc8c6f0ce34c0e993fe0427e5502e3d696de69e929b260640324d24a423d8f5f39da7f1760026feea620bc2f05e625588ffd80b177619571da3e517dea1b4f385426d2d88bad41e306bed0addbc9fb73b817a7092ff651a56c85c15aa33d03ea7bae75c5ab5c7cf6411486f625a3109accc37a996c79230fd97d2f3333b6c1c721c34fcf10e5bd123e230fed56ce921dcb1a4feec2bc8e9edd283ba1781722699a949ef20c76ab97ef582630c5279f233a257df274b8ada1d00381f9c8f6b908882a107f008461a9815f1a26236d63f8b75ea9edb81b5725371fd9229bc6358d7f4af7dcb37416a4e48c53a0e110dc24993b9821cc1524343e6335fd9b5e0d68d71923220dc9d5e39ad5a35ededd6c81885610d81d9512d2d5024178c65cdfb25438c67b87dd4156101161f5d3826af53426c3eb9ecf197e8de094511f0abaadd4f08f1e91d49a0615a41bd34687bf38dec3a9149bc2e0c17742c47a3eeb9207a51aa0a852f7d6405926ae8ba2c3b9497298a54249a5fd8fc497f9a5636f1f19e889d1a84c1c07a36425ff28130868e5d5254e0a2f0a28125f3a1906a5dd704335c777f1710274840563826946700a70eb38c33c0d74fb0a3bba309137b759c7a1578291ce62b7dc9e5ceeb91533fa2e7c6c52bb7ed07f8342f3a52a4e1fab9157ad7cd6286e900b131d8458f084e4fb1238fc84a38eca1d11ffff26064fe4500c3e2d2f6d6fd4430189bba22ad4eee2b006afa6f182411f86cc3e4988cf1d4fbcbe933ee0a2c438a3f679c08c244a177ab1ed83485b38f045de04883ed336fb955a23ddebbf7830a0e62a277e4a8241b1f6d3fcb62bb32bd2fbe1bc9fd2f6cc1b2ad142547c045f167a259a111c557b30587a04ac77c9218296b60dc57c42d1a9750893e969622d94abbc513461efd1914a1e42838a6e848d8074387c39da407183673210eedad6ed29358dbfbd8479732c191c5ef7c3ce2842666ce4f4e5cf1c47b5b97d21fbf22fdecbca5efb32f3341a7a916a4c91ea10551db6dad982ca3e612964f9a15f6c973a9dfcf8e03c77aba79b3e93b60c6d334ebffc6f13ee7e8fb12a09fb4f26b976382fc54ea6731e768a30a2e71b10a54682838398e3dd760dc185b02b522bc37ea1f362b7ecc8d5ad66ab4b5938c7fc587c191587c1b2c961728da1f85eff1d7c987fe5991bf7cf362d7cf0f30ff4b793d5e4c6868cb3595ad419e1c68c0f4e00755ac0990b547e222c03eed8674eda6258f2ecf7f0cfa9b3f7d401e1eecdd933e38b89902f7277f86d60a76202e7ef0d29fcdc5cef0ec4c12068b0171d918329a953babf3c72b8031a9802f4f1af5219b2a4737951c42a9413d46c1335371cf5d6ce092f9e3e5768c18afe5f7ab1bf8a28832e397d141b7d05c2c6ae72eff510107d30be43be58ef8d6b596f22b43fa6b14043d96924723f23980d40073a12d0b6b7056c7983dab752ed387ef6596174a6c9677da76d1475f81cff049ff8ae01353c98b7921159e25f7d0380abd56db623cc4181637d20832a3cd3b9e944da1adcd409996bbcc4015ef6302fc27c101c7cbf85357d6b040e645de95fc753f5404f770e9b746e645f097b0a6307ab961a3ebfe38fb75b103cb56ae4919ca0f1d1db187f104108495ba17b1c5d1ade13b8376cca5cc62a08d21b4b4b66db3387d638517a27de30bfbb951d1fdcca48637e0b65f28db5098de3d55ded7ef950c6cc3f4cb58fceccf5820f1781e3dd56bab3abe49485726fe7cd71557368c1a8466b477ab88f294fa5659b4845511cf77d758448fa6a998330dc56bf7c474af9a269dc3fff015de2979e583ff60404d6635537229bfa5149a0226d0c6a5a79e9893f3f702863af9ba22ef08a864c958908041eeb17713a5c50ba0cc477a55f186da8541fc522bddb28c71e69cf89c6577829d9d8441c88ea4c752c67f180557cf3484c410d2ba89be18f3f0645056f6c9a78c4d210f278eb7c26e5baa75d8ecb29370da077cf588c0976e801c41c5898f86eeaf0a040c20b69bce842737b5d375bac371c05e5549661364e0b3f5b5a92c65dbafed706da378b93d476e3aceb1848d9d8cbfefee1342bbae6c43554cdd3b31fbf2b44a55e7880ec5710f96fb1b78a9e3f3474c3f7e967552d18b7764fb1b56f6724d6a79ded10c6ce4b5f62e29f2026c93e0736dc51874a7459b36df79c12540d4fb850c68877aa73c5532c3c20cb392440523a38a9b261ac6b6ce50b3974b1c36daaa577cb18a7f1b638f93c8b9919824faa5a30924cdd26653399599ebf1fe898f92e46301a4c602caad7c4d8272ee0df44bea062a19f6364e6e8d9b6f09912b3beb599bc10d9ab3f0ae4fd1e6ecfb55d8aa204d1cddba3e83a5232fc814d044f22da4c790f34b3bbbaae6033b3d443f48a0bfd870dc8b2197135f86d53d76bbd52825058a5c593386a06af50d315d5c8994c753f96950fdfd9eb5781328798bb5bb55af270e124cb55d1f4bfa48e373e3b86ada8d32167736e144ec46fc10a09913bee00bb83a1797f93a9d787edc0e24bb4d85ca8a5e4ee272aaa451e2c8bbbcbbd406a345ca761d8acbebe6951a0c2de871dbb0b86c2f4a83182f6d4771eb8c5c4a9207623b620d32d8d51a4bc2c7cfdd3f51d30b4f0360854f0b9011e617cba43de606fa39ca2ad7d93fb079b5ee8995711ddce738b5731aead272d5f517cd9960740840eaccdbe5fd262f6300a3a176e513beb0163328ba06e06228cbbcccfc4ff548cda9f1a8e996aa0a5d66dc971e0b575402e9d83458005d85c8cac871112f649fd392fa399c7b1ebb69f1979e8fa1e31e8e4cbd93dda7349c997e8e5bb1137f1657c4fb63c68b681b940270f8bb442646958e3e8e7ad6aec2d8f7fd87ffe911764bc64dbefcb4baa71a7de0feee5d24f360a8fe0d5da25703541eb98e826ec63f07d1cc79a1342f31ff6f78abaadf16c241b20dcb5a58071dd287de5673dff9da76297bc6459e90d9413ab937bbdae1076a43c6e9723df43c10ce003239ac105e4ffff4f99ebf411e0ca5c69b3979565abe3fd5010a41aa55014ea16385fdf88884138df836ecf7861519fa3b61240baa2317a18b3ca994614b99eb5e08e3a6ae3dcb89c2bc82c081fa5dc6526ff574c32b23fd3b4e83829bf8d6f67f7b710d0c1a15b475a09592d073d6bf146b17597e9609e168c737ea285c953d82f82b72f0b9323d6bd3bf8e1187ef57388c0e305cd086589086f6538cfbd8f49ead72d52981c149d9648e11ec171840ae37c859fdf16d6d610e7399f82dc6430923f3e7714c942fae7842af8860a0a85e45e6683f9ff5cf5b3f294757ab7b25340159f624d48e675aeaa6525001567b96b15e5d2bf0fd605d0b21e59cf9f1d3dcf6abd6994171ebb0141fb663081ee2cb8fcf76aabc8ed277a4431123d6c862726f301cac15245d5fdcf6283f7f0d6c99e561bea0e4b36e1110664a3ef7f0a65686033b6de58514e46411b3e0240369b89d5ac6b1ed313c0f11c822d26812196a90460c6efcf55ed5147e440c41e7609be0895de444df88df50830868c58b945874df2f9a6952d5d755ed674d390046a4780bea3306fc6af762c421b6ed34ac43787156fdf6c23f32373100a0f3d870129a04d6e81359f591e9b213eaa6df9951dd9c682d90fba6f9dc2d2f03f9b564d2bb071265ce0a380d45acdf3906ff0c6971b4fcbff48b5995e69744eb5a2c73e07827909bb3031ce23199793b480ede6b7fc2d498f23eac5d01c5d8f00adae0c22a1b9f47323f7f39527b131a71c1ad653a460e7e7c790873abc38500934f641d5185f26e5e22ffb7b7d4140ac74d53e069df3c24da6079a3bfa13f9b79b1285231670a95b1ac7e9722584dc4ae34459364adb916a1e23adabe52d62f882ead52e3e6a0baaec1f66916bed3455af35af699d911e207d2d7cfbc48092d82bfc7057c708942a21ade1270fa5ea2e7145e5f981eba180e80cf278a23462c04a3971c48fd447221f40d7db5c9dd0987ea47eb939700f0fdd7dfa6277c9287b155e3f479271afe3772547e31b6558b9937485cfe2e07dba80b660bbcd3ce57285e278867a211cd464d2be09c3a1430c45ecb11634d51225d0cec81705375804388ad0623d9b0d6065f9fbad0abbdf6c65de414b6019cebeb61dde77c01f383cb2a2fe34b92859e744bd4379cf31b207bc873656747bad6fcc57dea5e0a24255132e4054eb70b2d223abd84d5953e298d4d8e1f0e08004c179d5c92a6e8bb55e380ffc562db4875957469df2dcf86ace7eaa11c82f082c5eefc21c36f4efe5242b78d3058488a06a565e3e825f687011e29164d08b7ee6ed7c70f322434da82b640dcebaa6ec097594a8fd0efad05be3e2e1e2762556c316780c921fbf9c62ee0e8863874e18b55c076a720293fe5581345be68d398c184410d59ba5b99038e8befdbb068e8510ec80302c8dfee9aab9bc4a1a009be90089f758f63119ceb1819346155163a35747c529ed633843e2c6fdcea8aa28c0741d1bd597be80fafa7ac2b20af2bd8775ae6136f23945b4b0a72c78391a848427a29ddd1baded1ee755cffa8fb9d07d37dea09b7bf73d7357c242f9e53d8135ffd6bde97cf4aae9549047e0fb83a9d5f428b96c6bf0db9f33d2790f62a0b6159c4feadf805a2a2c019ec5bf802a2856ee0e8dea3d9977349b5afa6a7f70f846d64671f0993996591f0c2468b47b4135d900b565e218a620978b6fbe431996375628994154e23b5dc8deceb70f21e03000b036df9efd0df4f11123bdf101196d38328a8365378325d7817da5b3ad95ceb739f1f2fdab4aa4beaa2da3f73cf13006f8f872a8cfc160aaf5f32e0eaad4e30c20cacf3352cee9662f2612004fc273b234c5c08c652d61bef7253c153a1cd7a3ec4362b8b323d8b38def4882ecd23a41f564c2f2bf752b263589a5feb33ba0588c755be6df4e312a2d418010c48fe2a307ad68b2802f95778f4d135c23d98e9664cfb89686af8955b96f882c5c9c7793aa4598e42b1013dbe57477441cc910fde00d2e58508cdd34bd26fb16f5a5d6c5bb666b901e3cb98aae883bbe6ae1ab19f9f24a3df38c79f2f3e5065895fb46f653d67e9051a45c7fcf9b6b1471ce1e91ae6e373330dba52c4689e0803f290c8ef073521593edf2191d8af6c27589b9d78e91c906c59ff437ba12e1753e2b7bbb33a9e51440f8f2cf23b7fc5e9d29fba59aa1f680a2a01d448dd7d6a4330098fa852c5ceef3ee30d775b889994e6878d0ba9f38c21f6382e2f3530bc94fc6341cb4c2df0872435bc0728baa4e1072e227c125914ff0a920e4e380a4a59a9d3c2a50e46b8d00ad00b3be7456d27467e62a69309acceac3115b755ef5be84e34eacb23a66761680aa04186b797aeae31226f4e138d12ae0c1bb085dad92c8a1f0b29abe28db466e743203b8b6b4e772dcb56656e163cd92937ccca86e7940a0e081d6e26e3ee8dce10939d4e18a026af06eb0c0426f6bf0d72ef8dffe0cca876b6d7b8def915e5ddc44f106090aa996181a1cdbb0ec8dc8884d13880967bbbc5f00497f2a029c1fbe015b23c65cb673057c71998cfebb618f7e3fe1fb16f4d480243fdbf5d9bc0068fb1244e7f7846401493064ca59fce7e042fb32a98ab2bba1aa5a3e056f46453b045f9806b85f1e7d6e0ea6bf8a53160105ee1583e73f4079da2034ce6011505316d8118e4e7a7daa5cf41f18be5be91430d9d074a695e7191bef29bcfff94b820980b17430da5c863bef14f2199aef3438f361ed664c2424078ab6d3f7475507f645ae5c61cd69fa7d28f6a4082a7899a17384c87a43c916e462cf086193630a23c9e0049153cf3745518f79f4ee72329a78c1003d267afd9bb448a56e807fccbca26f231ad5da844b7aa9e6401e3b929a6bec1dfeb0805bd380886bcf28465237d54f46744867d559f293bd1e8f1511b2e7627c5b58fc6a5953ef29dda218e05ff6abf56de5"], 0x201c}, {&(0x7f0000004500)={0x149c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@generic="146c932f3b2344ca0f3a7cf517410d44e4dadab118f4bbff8245e625bdeb", @nested={0x334, 0x6c, [@generic="e0edaeb6c14e12772f88500e0bac8cc189e8636ac30e0db7d3ba27ecdc637c2e755c8c7bc4f60e793bfdce1c655df5afa6c49eaffed92f4ce52d1c05c3a1673aea76e953f6fe09934a619483a5b62a2b5716ca573ce12af48014fc9cf225a4be7f81be9e8975a17be97fb806907499774a05f13cea2038a0f17cec1acf4e413bd5195001ebbbc68d1f0aa3842cae926d955221a1", @generic="35c22962eb3961bcc31fdf44c8871428e8ac3c60d2a6fa701f4a86c8ec7ec5486a1a19955f95ce7946d83f17b8c0f45080e1bc82086d8490a61db58efd6fbd39ac0fcc6c700726cf3c1485d558b1da746cdcaf6626e1eace3cd818dd9dc4b8ea574b4ba4f2776012c42606b90167f5915f25ee71f07071692aa725d5a53b25505ba79353aa0af38dcfbcbc91ed", @generic="b81112c09732219e818d0d6344dae2747d87e2bc586f7c5ffb9dbb4785ef3e52096c19fb7d1713f57e12fc0538ce73a86687697952df8eca5a05278b70ec24fa45e3a9d1fc963ea7ae3f30f5ee78e6fcdc6bfd72d1a07fa9d16babf357890f44402ba750e461245538808375b1cf54b543b515aeabafa54834e11a1a9be5cd8771979131c47f9c6bdf8cffe3d51b564b6e3a3bb554c0182c0a970c870513f8c3e41e63be03df159b35e94862318e9b", @typed={0x30, 0x37, @binary="110ad38cadef190c2d97383c994e79061164cc49a018b0ce5e6f6d84b5f7fb81233b9439f6c02343aa3b"}, @typed={0x8, 0x6, @pid=r10}, @generic="18af99ebfcc6cc1841172b0eb2f1f9f48a9badb2af028912dff335578aa76d9e9498ce1ba729b5bc26957b9dbcdab56284b9882e68972b25658583ce6c7d45a8d56cc0b3c786e0ead8efd87885ff6c4f544269914e7ff9dbce000b95ad5f126c1c0bcbabbae5875f37d9391ad72f962e4f95095bf130b85b2a6e47ad1385c95e40af6ad76cb0d9e800a54a985361d9d19f4bab71577c10c10785942d24", @typed={0x24, 0x82, @str='.wlan0)cgroupuservboxnet1lolo\x00'}, @typed={0x8, 0x39, @fd=r0}, @typed={0x8, 0x2e, @ipv4=@rand_addr=0x2400}, @generic="2c535ec9015c0abf41137f26164507eb2713ff3f2b3e5d409a0b500dd619b1f58abc1b37fb3d7c74a56c1c3579bbce3d975bba0079280e849b15d8c03509107106638a77f6ee8f5a5b387476a976ad766ce060130c"]}, @generic="6d151ded79898a728a965e288a4b54f6733fdde76f4ffb4166eeedd73c926c428282798c3b0b11d357aecd2fb1ede0c0a3c8cffd94f92a6e1086", @generic="e71996928a", @generic="cc0bdc8f4b3082c2c84469c4c4277a47713cb4a2a5df593f706a1e9c78e22c33d7c7d61c5d7b7755a5b15790c36291d29a1b563a1753469a3d3260c3e2c4722bfa2304e1d2816b8cc45cb1efdeb2a759d1f3c5ec19a2a398deae554abe74baeef8c698ce92a585acbc6d6753020d09349e98c92b48aaaa383b97c014022bac31ae528ef03b0cc2234aa11c447a20eb43bf", @generic="185794d4f6c81f37cd15325f8ac5a1c9444ad40da6bf47c0356452c7466ddcbba77c3a45555e", @nested={0x1004, 0x79, [@generic="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"]}, @typed={0xc, 0x60, @u64=0xf5}, @generic="529c0bb10c6218c5a082fd46cd74600d19f0f642b3006a94e7f951f71be9f141a25edc98267a0bb466f2a249973d82df44ae"]}, 0x149c}], 0x8, 0x0, 0x0, 0x4000000}, 0x0)
r11 = fcntl$dupfd(r0, 0x406, r0)
recvfrom(r11, &(0x7f0000000080)=""/73, 0x49, 0x100, &(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x80)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000005a80))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000002, 0x80030, r0, 0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
ioctl$FS_IOC_GETVERSION(r12, 0x80087601, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  357.925754] binder: 22790:22793 got transaction to invalid handle
[  357.948562] binder: 22790:22793 transaction failed 29201/-22, size 0-0 line 3018
[  357.960118] binder: binder_mmap: 22798 20ffc000-21000000 bad vm_flags failed -1
07:02:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
dup(r1)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2959a37baa904e619cd9c367818e1bcb9800812ff1143d1071a37195a3134d9b79cb3cd2c880b912c14120cef07c453b792e44c35f94f5f019fefe88a0f3fd631ecd365fec"], 0x0, 0x0, 0x0})

[  357.978436] binder: binder_mmap: 22798 20ffc000-21000000 bad vm_flags failed -1
[  357.999571] binder: 22794:22804 BC_FREE_BUFFER u0000000000000000 no match
[  358.005097] binder: 22803:22805 ioctl 8008700b 20005a80 returned -22
[  358.013687] binder: undelivered TRANSACTION_ERROR: 29201
07:02:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4000000000000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x102, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2379b88}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf77}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

[  358.023750] binder: binder_mmap: 22803 20ffc000-21000000 bad vm_flags failed -1
[  358.056022] binder: 22807:22808 unknown command 2074302761
[  358.077934] binder: 22807:22808 ioctl c0306201 20000300 returned -22
[  358.099458] binder: binder_mmap: 22810 20ffc000-21000000 bad vm_flags failed -1
[  358.131283] binder: binder_mmap: 22810 20ffc000-21000000 bad vm_flags failed -1
07:02:13 executing program 4:
syz_execute_func(&(0x7f0000000000)="c443755efaffc4827d1a20c401fc50c1c402b18c01f042fe4139c46241deb6905400000f6a9000000081c401956826c463154924ca002e66460f65ef")
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x0)
exit(0x7)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/223)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
socketpair$unix(0x1, 0xfffffffffffffffc, 0x0, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$TUNSETGROUP(r2, 0x400454ce, r3)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080))

07:02:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=<r4=>0x0)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000380)=0x8)
ptrace$setopts(0x4200, r4, 0x2, 0x2)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x7)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x118, 0xffffffff, {"00df6571acf456fda6071a94299d94954e58ff36363679eea3353871cc00b41c58cdaeab6a5959a885f31e0936ed3fe7fcb3fd862f04248711f96797ba104cb4f5ef85d9b434af3751c11e2090453bb7bf685dd0edfe763749e4b11542d4513316266e57c80c3eec123e39f5dca3a85aa214688665a3855cd94e4449654a7240357e13475b93d54c5121ef66e1fbeba499a048c935c4d4f8d593c1a81dfbe4b5f3fd5dfeff88296be3f8d93dd6541cf7a6ea805d90aa06930f77c9942533bc7c0b0c6ccfb2e150f5ec8e1b9df0415a8f6080b7073d82995c389f83024cfb35b728c43b0f598826a991a09f16bfbff84c32b01c6d98873888ebe391a4b08ec2"}}, {0x0, "b246c8e412efafdc3c36c7eef577012c14374d2e25d5cd3e3e6485ad433081f5359d5296466afda517d8c9fbfa9fc2e8bb64168daa5bba65961a20e1186ce9d897f95020ee23bfa0c8cf0899ab3554f697fb2727a754c0692e476921098661b54aaae1065f02df55a7714f22ab0aa776423a70c4a0caccfecb459f42afbbd659bcb2c3796e5b75a8d4bca9682fbd7613036ca0686009a385bf0d9cc7d33f1f04628b51b27e2daee088cef87e4d427ad75228b561b9ef467fccc116aeeaac99db1fab7bb5364dec5a4fbdb5d7fc654ba69f4adc432f0608764a44a91864740f4f41484bf785197c663a5a714431119ef4c90862e6c63d44297d60c9210c470118db4394ed9051c6f3dfdaf64440dc23af8b76ae4a722eba48ddbd65b803338772d085ccf141737147097a374d2efc434237566b43138ba676d45c9b288fef8fdbe7baedb681a7bfd932cd7a0cc4aeb80cb83b9d44eab8141e496cab063faa35335c09a71c7ea4fac883c37006b59ed5b9b580e0187f4da6148d193e50d7c7627424eda5c91e4850bf1cd57b8d8297b8895642e2c89df56d6f0f6c76bab5e3b36699dd20d518975a64a4e09de1038bfe886133785029b67792929e10cdcf8159a046aaf0c2a0a60285b8c29eb956444eae43a5101e3b93273b9f9923ff493d9bc9b9e7a570187c572a65b026a504080eaf970b7d0fcc7eef1027e3776c29e7049b51c707eb0f31203d02bb371e3d04eeec9838d33ef424613ebd73ff2a00bce8301b5b298f9a681a49637aaea6139393082ad7c34f8a9eac10cb0cc73383e525077e46aff469bc1d4616eb1c5b20db2240f8545275ef0993a36ad67d09cfd6616b538120af339a955155105ba07d40d74a6ba938cdf14be3392d0971b33736940a56081626827cf3beed561438ef99af1ed93b7b4f24d9ade7da3db694f96c6f4f82a763d0ec5c95363f170622ef09da4b61c005c72ad80189ac0e02a768644148324239d853080b1f03e1c1bcd777f79cdbb66e918d6ca4cecb58054d752c9d0b61071e7e7ab13bfcf7480252bdc0519f355a4f067abb0217380178fae4240c703ae9bdfc3d7a5f78de2061c5afa3be57c30729c1da56b1edff196921cad7df0d9714ee0a8ce17fb0fb734bfc8f4c63887af79e5896a3de648d0d92131a22e2d45175cf49690704e66a3c51f94421d9ee10e02d7632ade69ba7e00c28a222f4fe838c42e3c6b6fd737d611bbee6f286ede101cb92ddeee2720ebac85ed305b2a7d0389b79406293edb46456a0b07b79cb61c24b2ab228f3c71a887ea4287f7597d8c7f2fcf7e4b2e0b4544a7b42b279278a1feb4e89017bdfa2ea1e45cd253d365409dc836c25a1844d1d15b7463d1df7c9135ab926f91d9838423198843aec1c89807f8dd9dd2cc1a347e588e42db6f44d43cfbc73e7204b696e03b8367026ea7c562f679dd520a6f8d6e37b85e3ac6ea3b339e7b2b40cf116efed314609440501b4c9c967dddc69b09dd2c065198522b2a8322a9db41c1e4a1f7294392b161c6f2068b6d4edcd4315b4b3971c28d179dfcf849bc859172ccae2a97ae049bd2bb617cb3ca853ebe856defe4a2d910e8d3657ca370727f4bae67d8b1c7bce23a1480a9166fbf83746edbd60dbf2660edc7f94872517ec735efa7b98da85d583f81111b6b4e7d06f09b337e49f804bbf6deb2b3ce1058b871db7315d1952a41dcca8abcf1ee91e52d0effe8b9c86a570a9e08dd6cecf505ece8ebfd04ceeda4874ffe03add3619b70aef4c7a21323458c55704cfa46787c406ff5adbdff4537d389bb113bb18091e5f636f91f2c211bb88aa821d59409f5eccb5fa7d4bdfc72cdfb0dd8b8cf0bdd310d2d7acc5a83ea51fbb704656360caba7c2b6ea48ed0224e729d126addbd8b114674c7130558acb4c77be26e272d60405458dae97bb28990c639dcbc11527d1f64c2ba8591e9ea08132dfd9a6935940ea01c0ffc9210c9ea6a12561571886d8f02d31791b68de569d99e7632709d95cc55480d07bfed43b5f524fddf12d1cd3de9a4b74dcfc5ec493d93e87e862cd6b16e9bf5f87c1744943fa2e0e039803fe057fd2ef430cd891fece743dac0ccb90608bb85c5fa2384d40e17b061631623d1233e45f81c868a5a9364a0aed0629e1d2936ef1a3a1a8cb318c4a01c6881a67785b49d61e916d7b085886ff9dbc94e8c04a81b55f18ff47109187058a7ee224ace9cab2c389fdbef5f20b96b1860e560b52047030ff945b2fa03afd203462ce4fefa73ecf76a3f6722af98d9a95fc241a836a04a8a07b7548a2a626c4b7927dfddb2808347a68973dbf9c847e762218e7e63a5cef6262a3a236fca9408470c3f187d48164e3a72f514ed44ffe0b35a5230fa0c6b3477efac5be019d3715d71d72790717eca4d04e1b2ed6eba54a44489dc144c65426b98a7aaba47b303b4db6c1f4e80a8d18d001809ac465162b8dbee4820bee6b122f79d9095fda38a444127e1eeb944ec6b015cdd469a11e03a5c1378ecbbfe4564b60b7baedfef1bd75329409770d71ee6015b75cc92b075110381faab96328c2ae3a24b327a5e9bb0e65d8bed61e3b0588a8289d6756d5dbddb0b26bba17a09ed171bdd52ce8cdcb3d194658cd26a264585ab3336fdf65a7f869ceaaca873223f3dc92243eb5a6a4b35b878a145dc6b95c041fcac0006663165f32f75973e8fba747481a4b29743c4932ebbf9200042d07825f127c53e04d301785a7721c6f67078f592374812bd7bc490c6f81d01b3e12cb7184e5e4100e19dd62ff279fd2153ddcb1b9f99800cd1b3b95c9699de4f3c73bbc5a844b0f897c37b782f3b22c99b676a2a5fb1c7d9d037eec16fc27574968cd13c06c87e412010967feee679323020f671db25ace3ad7835c8302a8bb431bde39f642d561bf288c1c5469ffcfe537a410e56bccc40a5016b7f299fd6f0054ad0898f1d4b1b54c6ff0911b35c07452c88aa3a47e873718f0e497ca3bdf09437ba807e019eff6ad10acb44970c74b2f8ae6fd3536687f0f70c41780e919a09efb351924db713b8c74a6093f7376c6016d95a7d04a7f4887c348fda91dfde5b99c3a53b1fdaf82925585f02fc2ff998936229a109d87421b7f072de54292135e7ab952b00f1627fbd6cc7774297197b35a6d18aaa99ca28b16b98b085c1a3aac7b9c4d3d770e23e50321cf2558ff47976972b904c5d07f4d6ebf8c035895d4c808c476f5f927b243278d8cddb06ed6442e8b145ea49cbc3074826f15db0b63711d3d3e0857a512837444a04957ce75cd9689de717211ae75ea80045ff6179fe7b73ed44a82f751c83498c3e1040f9e7a2db768722979f5c7ca8ddc266afc7089209df344c3822df9507eb056af922b6afa369506d2d76429421924c2ba5f2861e6e7af293c8879b72f1b7e7aa8acc8dac2af5cbe0d9780a065337c277b79fe6f290afdfda5265df9392e03144abbce577772673c7ec9ed9bd9ad5216d22758f33c6a9279754480abe929d1b4186586eff09ef80757b3c9838361e1d53be2cd9cd3252d19110db301be0e12fff157c182f495e777b2b35756d0c2b3d02a8607caf77cef0de4120097d21532a973bf9d63212b39f820d1e4fc50970f5df9ef81a1b6b270f96eb2b6999373aa0ee8f0493f22d737d60925c04d183eae3d2e4b95b08af10d2a81fc8ee62d6d74b68b8fcd168a5d39f0c820fbcfb54b95ea384e786c8dee23ef563c7bff2fc87c44b98dfe80f13d4f4d13fd59b055d4805811f2ad09a3f0786a679100f04597832391a096cc71cc537ced46d88f6f21b57beaa90075e25aa03070c2e3f091f74eb2e8efccc7f9ccaf7c85dd3e4dded1f83ff453fe4aff7f52812b7576fd488df7c3dd1d57e2da3aa0c8e2f554f17001aabbcdb804822409c2d47992403d298ca0554b01e33b327bf578985995764abbb72ffcd7115dbc4847e5273546addbc0f276cfc40f3eed918c8c95272e809e00fb743b861d171c74db480e47ccbbc8c70b38ce91a2dc0ece5c1a95113ecd531e7c0628229dc4dc7015afe42c0ac46fe863063c75e3ff2244f5d2fa0049fca6b971cd4c5f58d5da005333187b63225d412946590f92a6f7a24dc88c136cef819edd574f1cfe1cbe2f45a7f32581cef5f51dd82786bf43938262eb7c1606eb714af6793a31874e0a4516d5733e0f0d283202ba8b89242e2c4bcdcaaa668aae7e6e1db9ae5978ec65ec1172ffb2d68fcb8e27a7d11fbdf98094852458909eb9176d50b222057e3eca8a63dc515bac830cee7c52679692c73181c7d06bfa33a570a5b41bce4a710d452f789a9ef653cfa44dd002ebcb2e88cf2384c5ae14d11f5a2ed7c49d28b74ca97f0b02d116d318a970b414dac2760eb6157c33fcd8ca4f1caa9d471b9c2d76013ce86d284912fddb651d6d5ee9a5925ac4e7c7633c83db8723b88e8c4340da7b1151dae5fb971c12d862e48ce9c2790013f87304fd77b3b96c9f2235dbb04859689cbc7b43ac00622cacc548995c21f3f6054eccb373990ca3324c24bd374935a0ade3e70bfd3458e6018109084711ac4436dff56e0ec458bd1d3a0804f5b11d503a24062565b976fab2d647acd9692ab43a247058632b634ce7389a7f2961eaf9ffedb55881e4509a90e152b9d1ef0a1d06502329ea1ba4c16a67fc680b7522d1b238924febc59cbf589c0a9a116adaf5acfe77dd4331a09d8cc555ea152e0722a4b03a25121aad52f1b4e2f50b92864948edf72507431a542b82ccdf449a1778e9f6c53c15f4dcbdffe849ffd75ff1f7b481c7bdbf5db9939519446f4761daa1a90ffdaae95e9c799988529c822d6c089ee701137b351c0e4d9e6aaa00dfeedc5c07bbd1b8407bc5a56eb4d8b8bf17b58331cdb910ff1edf33d5e8e55e389108a5ea7bd778e38270aa6fc107bc5a8e2a73a7e33108a3eec9b34de161de2212ff774f5a59916b068204774a9aabec546b18c7377314e757545202f246c99899705c2d4af127582181240ebf5ac3bce44ce47b04bc43f32e4714cb13da07dc3521f27a8f3236124ea67bf6f0209738c0ef9b5c9e1cfd6933ba7906f583867756eb67abb04e6c0ec0c7455ee513e396c28d46fd40d9de2a87fd0413ba6033d51ce9259948a4a9133297a693185fa6761cdf4855f0f9e2869a90d8cd32ba0c1d8f6a9252771b8c64ab8a9581e573f817855f675824cfca448d733e37b00ae82bac770b6ffdd42c25a5d1222861e0b9b6f46a1058df8620d5ea180cc00be24eb9fbff23ab7ae0b7ec653c4c91bf8d78b8fd78d00927feb2ff063bfe37b302e2386cdf0558a27b4d1a7c50ae4036a3dbdf360b727b4cd20c4ad7a5a53953fbe20455f027930ae3737713041a9b9b4f67bc8e9fbf29e1be8b33fc53cd49cbf6a4f85d9130cc8701f09cd92fc81ed45aecb3206c00e8e99df78fd06ce183fae5d2b489fb13a28103d57464e690c0b3cfedb12b9110d8041379d05aa700dfdd0e75cd8fc27bfc56c2bd2fc418df56cd8c503df2233948c332c04dd59cfea3fc24d5c848cf17dba4dbbe7f45f22de3684424e6133c680930ba4d2d01374feb6bfaa1ff392910a27d36e978967e27202cbc9c6e74f564029504184679d153ef07a57bd12fde60d695f47afd92ea0055bfe24140b1b080eb683a3e7080fb56910106ef525aa688ceb4115d4e799fc351d3352f4e400ac6076c1db06a29caef18eb3782cabc92122e4d0513870f7c1459120bbaf9bad822f54d1be3925647d90381f988f8c434893a0059a20ea3a6c38f5088503223d0"}}, &(0x7f0000000140)=""/254, 0x111a, 0xfe, 0x1}, 0x20)

07:02:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x24133, r0, 0x0)
r1 = dup3(r0, r0, 0x80000)
write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x8, 0x3, 0x2}, 0x4}}, 0x18)

07:02:13 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, r1, 0xb10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2e40}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)

07:02:13 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
prctl$PR_SET_ENDIAN(0x14, 0x3)
sendmmsg(r0, &(0x7f0000000000), 0x0, 0x4000000)
inotify_init()
sendfile(r0, r0, 0x0, 0x3)

07:02:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x80040, 0x0)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000580)=""/160)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x10000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x5)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e22, 0x7, @mcast2, 0x8}}}, 0x88)

[  358.578917] binder: 22834:22837 got transaction to invalid handle
[  358.586795] binder: 22835:22844 ioctl 81009431 20000140 returned -22
[  358.594590] binder: 22836:22840 BC_FREE_BUFFER u0000000000000000 no match
[  358.595027] binder: 22834:22837 transaction failed 29201/-22, size 0-0 line 3018
[  358.610900] binder: binder_mmap: 22835 20ffc000-21000000 bad vm_flags failed -1
07:02:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000080)=0xc)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x8, &(0x7f0000000140)=""/195)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  358.660895] binder: 22835:22854 ioctl 81009431 20000140 returned -22
[  358.664464] binder: undelivered TRANSACTION_ERROR: 29201
[  358.680013] binder: binder_mmap: 22835 20ffc000-21000000 bad vm_flags failed -1
[  358.686945] binder: 22852:22858 BC_FREE_BUFFER u0000000000000000 no match
[  358.693446] binder: binder_mmap: 22857 20ffc000-21000000 bad vm_flags failed -1
07:02:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000080)=0x7)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="680093a4b995ca0d10bd07c7a122ae1ca4bf0000", @ANYRES16=r5, @ANYBLOB="010225bd7000fedbdf250d0000001c00090008000100ff7f0000080001000100000008000100400700003800050008000100657468002400020008000200050000000800040005000000080004000000000008000200faffffff0800010075647000"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400600)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030840988f7c656af4f33d7f82b34dd1eb8c5d6139cb7c5a6bc9645b706d8d915431f80bc29eafd0ae318f3b5c48df39f0626bc31577c1a288b0245bc01778088aa48f9211583dbbdb2ea555851bb68fb189e0f000d6774afbd121eb5303baa9aa59c8b12bbdae8ef51ac5b8116ad387bf2c4b52504f85963bdddd0c955ee02e42ab1aa1b626284c9e2301271ab31f49bf455ceada9a17062966077a88f8f20cf9a0eca8701f6d64f40192550c8fc611271910965cb2", @ANYRES64=0x0], 0x0, 0x0, 0x0})
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1)

[  358.708406] binder: 22862:22866 got transaction to invalid handle
[  358.728199] binder: 22857:22861 ioctl 40086607 20000000 returned -22
[  358.730730] binder: 22862:22866 transaction failed 29201/-22, size 0-0 line 3018
07:02:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x46000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xe0202001})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  358.754243] binder: binder_mmap: 22857 20ffc000-21000000 bad vm_flags failed -1
[  358.762244] binder: 22857:22870 ioctl 40086607 20000000 returned -22
[  358.782569] binder: undelivered TRANSACTION_ERROR: 29201
[  358.786250] binder: 22872:22876 unknown command -1740634109
07:02:13 executing program 2:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1008, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x4000000000004, 0x200, 0x10000}, 0x2c)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

07:02:13 executing program 5:
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0)
readv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/104, 0x68}, {&(0x7f00000011c0)=""/15, 0xf}, {&(0x7f0000001200)=""/198, 0xc6}], 0x5)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001380)=<r2=>0x0)
sched_getscheduler(r2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r1, 0x0)

[  358.810808] binder: binder_mmap: 22868 20ffc000-21000000 bad vm_flags failed -1
[  358.822004] binder: 22872:22876 ioctl c0306201 20000240 returned -22
[  358.827038] binder: binder_mmap: 22880 20ffc000-21000000 bad vm_flags failed -1
[  358.828597] audit: type=1400 audit(1553151733.693:70): avc:  denied  { block_suspend } for  pid=22880 comm="syz-executor.5" capability=36  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
07:02:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000080)=@l2, &(0x7f0000000000)=0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  358.885532] binder: binder_mmap: 22868 20ffc000-21000000 bad vm_flags failed -1
[  358.916528] binder: binder_mmap: 22892 20ffc000-21000000 bad vm_flags failed -1
[  358.921614] binder: 22897:22901 unknown command 0
[  358.944939] binder: 22897:22901 ioctl c0306201 20000240 returned -22
[  358.956560] binder: binder_mmap: 22892 20ffc000-21000000 bad vm_flags failed -1
[  358.966214] binder: 22900:22904 got transaction to invalid handle
[  358.982183] binder: 22900:22904 transaction failed 29201/-22, size 0-0 line 3018
[  359.001657] binder: undelivered TRANSACTION_ERROR: 29201
07:02:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00')
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3aa, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630cd28bb01669f433be971a86d1744c6e8840bc9188f2ee0c0000cbcc35c0", @ANYRES64=0x0], 0xfffffffffffffe2e, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x4000000000000})
prctl$PR_MCE_KILL(0x21, 0x0, 0x1)

07:02:14 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

07:02:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
ptrace$getsig(0x4202, r1, 0x80, &(0x7f0000000080))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/104)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:14 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x4d0, 0x0, 0xf8, 0x308, 0x0, 0x0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7fff, [0x80000001, 0x4, 0x9, 0x1000, 0x90, 0x935], 0x8001, 0x6}, {0x80000001, [0x1, 0x1ff, 0xffffffffffffffd1, 0x176e22b9, 0x40, 0x3f], 0x5, 0x80000000}}}}, {{@ip={@multicast2, @multicast1, 0xff, 0x0, 'veth0_to_hsr\x00', 'syzkaller1\x00', {0xff}, {}, 0x2f, 0x1, 0x2}, 0x0, 0xe8, 0x210, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x2, 0x5}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x4, 0x6, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0xc705, 0x6, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}, {{@ip={@broadcast, @rand_addr=0x43, 0xff, 0xff000000, 'teql0\x00', 'ip_vti0\x00', {0xff}, {}, 0x62, 0x1}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x1ff, 0xfffffffffffffffc, 0x2acf, 0x1, 0x9, 0x3f, 0xe3}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x9}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x101}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x530)
sendfile(r0, r0, 0x0, 0x3)

07:02:14 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0xffffffffffffffff, 0x4})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200, 0x6be, 0xa78, 0x80000001}]}, 0x10)

07:02:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xffffffffffffffff)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x100000000000000, 0x1, 0x8, 0xf2, 0x2}, 0xc)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  359.536232] binder: binder_mmap: 22919 20ffc000-21000000 bad vm_flags failed -1
[  359.539545] binder: 22917:22922 unknown command -770940157
[  359.550804] binder: 22920:22925 ioctl 80e85411 20000080 returned -22
[  359.552315] binder: 22917:22922 ioctl c0306201 20000240 returned -22
[  359.565678] binder: 22920:22925 got transaction to invalid handle
[  359.576218] binder: 22920:22925 transaction failed 29201/-22, size 0-0 line 3018
07:02:14 executing program 1:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x121302, 0x0)
write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r0, 0x0, 0x1a, &(0x7f0000000240)='em1(/security+user!]]&-]^\x00', <r2=>0x0}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r0, 0x0, 0x11, &(0x7f0000000200)='ppp1,ppp1{nodev]\x00', r2}, 0x30)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a92e1815f91b8579a8faca73e184add20656c4eae1c97b0783351cf777b148d6ab7330fcc00d1aa4303f706f59ee9fa157c3b04f91d74b2c1ffac9d7e55eac1b8d7745bbb60dcc54b79c4db9843563b4bf250f9a4ee7734ccebf1b46ddafe9f1c3d1f3b60c5b6f8dd849dd6040749cfa2d99990f9b28571953db139b359a849a2dd769132c0bc112829dc8f4caa212f14cdb34d5b92b20a25"], 0x0, 0x0, 0x0})

07:02:14 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r2, r2, 0x0, 0x3)

07:02:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  359.592061] binder: 22917:22922 unknown command -770940157
[  359.607019] binder: 22917:22922 ioctl c0306201 20000240 returned -22
[  359.614249] binder: binder_mmap: 22933 20ffc000-21000000 bad vm_flags failed -1
[  359.625225] binder: undelivered TRANSACTION_ERROR: 29201
07:02:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/connector\x00')
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1400}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x44)
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40102, 0x0)

07:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10110, r0, 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x80000)
ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000080)={'vlan0\x00', @ifru_ivalue=0x5})

07:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
restart_syscall()
write(r0, &(0x7f0000000000)="aabc61bceefbd1a8a7e22964ab00", 0xe)
r3 = fcntl$getown(r1, 0x9)
sched_getscheduler(r3)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840173188442dee7694c5b5e1309e0b2bf67be7de6d70fabb0e2e82ab97bf873d6a0ed4658346b1fc69", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000200)='./file0\x00', 0x80000000101000, 0x1ea9978c4647be5a)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)={'raw\x00', 0x91, "23766467c853d72d8ef7c106ba4e207734b2130d134d33b15422a0214a01e736a6f9569ec2637de287f6ec69e9d90330f72ad5d12a4e0ec8f4debc288f3bfaf674751d5595a280e62f6a6ce8a071fd027da1766779c9edd7157587442533da9f804c0c2cf963f1c29601d2480df4b1acc18101c7d82f96fa40b6d3eb1f2cb8eacf264e451d54610e41d5d55db8102042e2"}, &(0x7f0000000080)=0xb5)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20d08f33e6af190a0710bdf9235f3f5426899c1c97e9776bc91c3b21aebb0f016e719be95e03f332a6bd688954169c43a4fbde61c14e86285adbc16fcc3e1d16996cc0a36bb661150ecd369565883417c82402ff6e472334d658fc69795a5e4c2475813f7aca87f5eeb92e48927e4b79728131"], 0x0, 0x0, 0x0})

[  359.685871] binder: 22944:22949 unknown command -2115923302
[  359.704873] binder: 22944:22949 ioctl c0306201 20000300 returned -22
[  359.711939] binder: binder_mmap: 22952 20ffc000-21000000 bad vm_flags failed -1
[  359.720820] binder: 22947:22954 BC_FREE_BUFFER u0000000000000000 no match
07:02:14 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10)
exit(0x0)
ioctl$RTC_WIE_OFF(r0, 0x7010)
sendfile(r0, r0, 0x0, 0x1)

[  359.777417] binder: binder_mmap: 22952 20ffc000-21000000 bad vm_flags failed -1
[  359.787800] binder: binder_mmap: 22964 20ffc000-21000000 bad vm_flags failed -1
[  359.794338] binder: 22968:22974 BC_FREE_BUFFER u9476ee2d44883117 no match
[  359.831037] binder: 22970:22976 unknown command 865062944
[  359.845924] binder: 22970:22976 ioctl c0306201 20000300 returned -22
07:02:14 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:14 executing program 5:
prctl$PR_GET_FP_MODE(0x2e)
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
r2 = socket$unix(0x1, 0x7, 0x0)
getpeername$unix(r2, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0))
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080))
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000200))

07:02:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4b2bc78b20742d6e76d8cfa5b0c58fee03630840", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x100012, r0, 0x0)

07:02:14 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00\x04\x11\vME\xbe\xd8\xf1\xc0G\x8b\xd08p\xae\xecR\x90\xf7D\x03\x03\a\x87oH\xbf\x11\xc8\x1d7\xd9')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  359.875937] binder: 22970:22976 unknown command 865062944
[  359.883250] binder: 22970:22976 ioctl c0306201 20000300 returned -22
07:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  359.917542] binder: 22994:22997 unknown command -1949881525
[  359.917897] binder: binder_mmap: 22995 20ffb000-20ffe000 bad vm_flags failed -1
[  359.929457] binder: 22994:22997 ioctl c0306201 20000240 returned -22
07:02:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x10005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x15c, r3, 0x3, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4d7f2011}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x509}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa791}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55c2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  359.967035] binder: 23002:23008 got transaction to invalid handle
[  359.977454] binder: 22995:23001 ioctl 894b 200000c0 returned -22
[  359.995002] binder: binder_mmap: 23007 20ffc000-21000000 bad vm_flags failed -1
[  359.996322] binder: 23002:23008 transaction failed 29201/-22, size 0-0 line 3018
07:02:14 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0xfd, r1, 0x1, 0x4, 0x6, @dev={[], 0x11}}, 0x14)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r2, 0x0)

[  360.005196] binder: binder_mmap: 22995 20ffb000-20ffe000 bad vm_flags failed -1
[  360.022622] binder: 23002:23008 got transaction to invalid handle
[  360.023736] binder: binder_mmap: 23007 20ffc000-21000000 bad vm_flags failed -1
[  360.029393] binder: undelivered TRANSACTION_ERROR: 29201
[  360.037049] binder: 22995:23001 ioctl 894b 200000c0 returned -22
[  360.042892] binder: 23002:23008 transaction failed 29201/-22, size 0-0 line 3018
[  360.058417] binder: 23010:23017 unknown command 0
07:02:14 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x4, @remote, 0x4e23, 0x3, 'sh\x00', 0x9, 0x7, 0x3e}, {@multicast1, 0x4e24, 0x2000, 0x8, 0x6, 0x4}}, 0x44)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:14 executing program 1:
r0 = accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x3, 0xff, 0x40, 0x1, 0x101})
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpgid(0xffffffffffffffff)
ptrace$setsig(0x4203, r2, 0xca, &(0x7f0000000040)={0x23, 0x0, 0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00089f02651db4606a", @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  360.069447] binder: 23010:23017 ioctl c0306201 20000240 returned -22
[  360.078874] binder: undelivered TRANSACTION_ERROR: 29201
[  360.087359] binder: 23010:23026 unknown command 0
[  360.092760] binder: binder_mmap: 23023 20ffc000-21000000 bad vm_flags failed -1
[  360.099202] binder: 23010:23026 ioctl c0306201 20000240 returned -22
[  360.153553] binder: 23030:23034 got transaction to invalid handle
[  360.180453] binder: 23030:23034 transaction failed 29201/-22, size 0-0 line 3018
[  360.188798] binder: 23037:23041 unknown command 43976704
07:02:15 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
r2 = getpgid(r1)
r3 = syz_open_procfs(r2, &(0x7f0000000440)='smaps_rollup\x00')
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="f9fa4111d7054c04f80e7771e998280c450b94a4abc7", @ANYRES16=r4, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x200000d1)

07:02:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x280, 0x40)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080))

07:02:15 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x5)

07:02:15 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x200009)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r1, 0x0)

07:02:15 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4840aa0000"], 0x0, 0x0, 0x0})

07:02:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2)
readahead(r0, 0x15, 0x81)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  360.199275] binder: undelivered TRANSACTION_ERROR: 29201
[  360.216568] binder: 23037:23041 ioctl c0306201 20000000 returned -22
07:02:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={<r2=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f00000002c0)=[@increfs, @reply={0x40406301, {0x7fffffff, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r1}], &(0x7f0000000080)=[0x78]}}, @transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@flat={0x776a2a85, 0xa, r2}], &(0x7f0000000280)=[0x78, 0x38, 0x28, 0x30, 0x38, 0x78, 0x68]}}], 0x8807142433fd11ce, 0x0, 0x0})

[  360.276249] binder: 23056:23060 ioctl 8912 200009 returned -22
[  360.281429] binder: 23059:23064 BC_FREE_BUFFER u0000000000000000 no match
[  360.284378] binder: 23058:23061 unknown command 11157576
[  360.294950] binder: 23059:23066 BC_FREE_BUFFER u0000000000000000 no match
[  360.303413] binder: binder_mmap: 23056 20ffc000-21000000 bad vm_flags failed -1
[  360.303475] binder: binder_mmap: 23055 20ffc000-21000000 bad vm_flags failed -1
07:02:15 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=""/103, 0xffffffffffffffba)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="89446c2e6f69db160000000701000d002f64580dadb6a7c7d565762f622acc82b2ae0017de01d49bc7384ce6e8cc1ae057887b57f93c031014dd9452d9101e8167097c458fa801720dd6415e3e24c06175373ee404b5"], 0x56)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  360.326198] binder: 23056:23073 ioctl 8912 200009 returned -22
[  360.334120] binder: binder_mmap: 23055 20ffc000-21000000 bad vm_flags failed -1
[  360.339666] binder: 23058:23061 ioctl c0306201 20000080 returned -22
[  360.342630] binder: binder_mmap: 23056 20ffc000-21000000 bad vm_flags failed -1
[  360.361422] binder: 23072:23076 IncRefs 0 refcount change on invalid ref 0 ret -22
07:02:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffff7ff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x4810, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getegid()
fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setregid(r2, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116339d3fd7c276135b7e95ec64f1540aaf4dcced4afff0f000051a22ec1b34521f4615001a2216c597375015ae06ced6d3faf37b881d7"], 0x0, 0x0, 0x0})

[  360.382184] binder: 23072:23076 got reply transaction with no transaction stack
07:02:15 executing program 4:
clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x102, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000100)={0xc22b, 0x2})
socket(0x11, 0x80007, 0xffff)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x801, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x40)
io_setup(0x495e, &(0x7f0000000000)=<r2=>0x0)
io_destroy(r2)
setxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x5, 0x7, 0xfffffffffffffffd, 0xf6}, 0x10)

[  360.424515] binder: binder_mmap: 23081 20ffc000-21000000 bad vm_flags failed -1
[  360.432310] binder: 23072:23076 transaction failed 29201/-71, size 24-8 line 2926
[  360.439140] binder: 23088:23094 unknown command -751213807
[  360.441350] binder: 23072:23076 ioctl c0306201 20000240 returned -14
[  360.446535] binder: 23088:23094 ioctl c0306201 20000300 returned -22
07:02:15 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x4a8, 0x2c0, 0x1c0, 0x2c0, 0x2c0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x5, &(0x7f0000000000), {[{{@ip={@remote, @local, 0x0, 0x0, 'erspan0\x00', 'bond_slave_1\x00', {}, {}, 0xff, 0x2, 0xf}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1b, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @gre_key, @icmp_id=0x68}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'hwsim0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x11, 0x3, 0x4}, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa3d86ab679ba471d, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20, @port=0x4e23}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xffffffffffffe345, 0x6, 0x40}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @loopback, @loopback, @port=0x4e20, @icmp_id=0x64}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffff, 0xffffffff, 'team_slave_1\x00', 'nr0\x00', {0xff}, {}, 0xff, 0x2, 0x24}, 0x0, 0x118, 0x150, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x5, 0xe, 0x1, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x2, 0x1, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @gre_key=0x200, @gre_key=0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)

07:02:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x840000000000012)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000000000002, 0x36010, r0, 0x1)
r1 = fcntl$getown(r0, 0x9)
ptrace$setregset(0x4205, r1, 0x203, &(0x7f00000000c0)={&(0x7f0000000040)="c895776869e79be63dda97e94dff2bca0ce6d630926eb9486209e79ed9e5ab2ffc95206652a8ef8ea01e353cd40f1b846a082671db7ca4ed76feeebd7da9c67d0e94be9c5a9bc6944ce5db66eb", 0x4d})

07:02:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634800ff"], 0x0, 0x0, 0x0})

07:02:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)

07:02:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto(r0, &(0x7f0000000080)="16df5758906718a04fd8e73d813478e4c04b7a7b2896a899ebf4d770295ce8d607f9e2540ba76ef5b168", 0x2a, 0x40000, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5473, &(0x7f0000000000)=0x5)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  360.526162] binder: undelivered TRANSACTION_ERROR: 29201
[  360.556923] binder: binder_mmap: 23107 20ffc000-21000000 bad vm_flags failed -1
07:02:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x2)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2)
socketpair$unix(0x1, 0xfffffffffffffffc, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="24040000", @ANYRES16=r4, @ANYBLOB="24002cbd7000000000800100000008000100", @ANYRES32=r2, @ANYBLOB="0400020008000100", @ANYRES32=r2, @ANYBLOB="8001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004001f00000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000008000100", @ANYRES32=r2, @ANYBLOB="7402020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f7078ada14849461b5f8dbcc8698a315f686173685f746f5f706f72745f6d617070696e670000000000", @ANYRES32=r2, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000010000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040001000101d6000000000002ff040000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r2], 0x424}, 0x1, 0x0, 0x0, 0x804}, 0x5)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
write$binfmt_misc(r1, &(0x7f00000006c0)={'syz0', "c274a83cd9da8aff5760ebd7b762d4f995479b7459395d954b2205dd8ec04bc48cd0ed5931b5bba274005c108c649203fa0c0ec95b245f06da8f16e9856c389a1585721e87b657879d14235eedc91a77069e78a8f517aa457bd5f4d3182b56ac04591bdd001665dc89cd05ce7c38274a472c6c180211e3161d451e19042bf47b70021e7c8b6a7bd42f188d38e32a99f04a03852884f578e6560677637d07"}, 0xa2)
ioctl$KDENABIO(r1, 0x4b36)

07:02:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x4000000000800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='lo\x00')
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:15 executing program 1:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)

[  360.572933] binder: 23109:23114 BC_FREE_BUFFER u0000000000000000 no match
07:02:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
r2 = getpgid(0xffffffffffffffff)
ioprio_get$pid(0x0, r2)

07:02:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x101200, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x80000800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="31e34840aa5ad9679ad3f69cefbcb2f638395527166398d9c92a7e006d0b72ae28fd78a01039f945f7193c0cd1f65924eb6726adba999ed502cdcc8bfa15b9f92e42d233d8dda22606f94cc244b596c62a349caccd6417d80cef40"], 0x0, 0x0, 0x0})
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x100000000, 0xe5a, 0x6, 0x7, 0x0, 0x3, 0x0, 0x9, 0x9, 0x9, 0xbf2, 0x7, 0xfffffffffffffffb, 0x9, 0xffffffffffffffff, 0x1, 0x7fffffff, 0x9, 0x26e10ca4, 0xff, 0x1, 0x7ff, 0x3, 0x7593b4a3, 0x3, 0x9, 0x705e, 0x9, 0x100000000, 0x1ff, 0x3ff, 0x6070, 0x5, 0xffffffffffffff4f, 0x8, 0x1, 0x0, 0x2e, 0x4, @perf_config_ext={0x0, 0xffffffffffffffea}, 0x8040, 0x230f, 0x8fb, 0xf, 0xae94, 0x100000001, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000001c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x807c, 0x0)

[  360.651181] binder: binder_mmap: 23121 20ffc000-21000000 bad vm_flags failed -1
[  360.670913] binder: 23132:23136 BC_FREE_BUFFER u0000000000000000 no match
[  360.678562] binder: binder_mmap: 23122 20ffc000-21000000 bad vm_flags failed -1
07:02:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc\x00')
ioctl$KDDELIO(r2, 0x4b35, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  360.694586] binder: binder_mmap: 23121 20ffc000-21000000 bad vm_flags failed -1
[  360.722279] binder: binder_mmap: 23122 20ffc000-21000000 bad vm_flags failed -1
[  360.732571] binder: 23134:23139 unknown command 1078518577
[  360.735179] binder: 23142:23143 BC_FREE_BUFFER u0000000000000000 no match
[  360.744351] binder: 23134:23139 ioctl c0306201 20000300 returned -22
[  360.754808] binder: 23134:23139 unknown command 1078518577
[  360.769093] binder: 23134:23139 ioctl c0306201 20000300 returned -22
07:02:16 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000180))
exit(0x110000000)
sendfile(r0, r0, 0x0, 0x3)

07:02:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080))

07:02:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="996b3153ac5091d7d8db480aab79f5af93b23381e4f6a249d7962a3545a14991cdc449c2c0cf931ec72677956a20", 0x2e}, {&(0x7f0000000280)="6db6fb1c82a03750b40fa7642428159d154cfe0489f630edad07221d8810d80843241d60642b63c85e9f8106f289000f6ef4aeab1b9e8d229ce48fa3772b1e4f1f2ad40b9cbd736f367a78cd1fd8845c67013136aaff08a8389e40e1f8df9bdbd25a7d8a9464844b5ecfdb3946337b4f292eec035fe557b69e2708bba7320e0a777d8b470dbc18b191c090c9d21ba11488ebfae6e7faada7a7ecb93c59ce2b90", 0xa0}, {&(0x7f0000000080)}, {&(0x7f00000001c0)="173c4371d761dae96f2358062e24cadb16aad0d3d6d7301aa6a6a1ef7e031455937347e1592a05eb2a59ed399a4dc8344b3843d08e84f0a849cb2b0f057400d5e6bdfb0c3a06c1d2ea87c103cfe6a6be0ba8398e43a608f626d00065", 0x5c}], 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
prctl$PR_MCE_KILL_GET(0x22)

07:02:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x60)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400, 0x0)
r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3085b84cebaf9dd305ea4323a549f69f0490c0f1df7e7abb5ea55c4fc79429ca75523cf40125176d2f6804e93b37fda1e2283fb69c0bd4a090c56c670dd5fde550aaf97900596939dc9dca0f4c772ada642b252926898ad857e3be4260ccabd189677dd8b824e6d496f599d0805d154ae5054b703567a5ff5c3ad7ea6a4050ce94ba54d7ccabfd3b46efca702e085fc54737110d29e24420c7ae5158"], 0x0, 0x0, 0x0})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004081}, 0x10)
ioctl$BLKTRACESTOP(r2, 0x1275, 0x0)

07:02:16 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r0=>0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x7fffe)
perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x3, 0x7, 0x100, 0xffffffff, 0x0, 0x7, 0x20000, 0x0, 0x7, 0x3, 0xfffffffffffffffb, 0x0, 0x100000000, 0x3f, 0xffffffffffffff78, 0x7, 0x1, 0xc2, 0x7f, 0x0, 0x5, 0x6, 0x2, 0x8a, 0x800, 0x9, 0x3fc00000, 0x2, 0x3, 0x7f, 0x61, 0x2e, 0x1, 0x81, 0xc498, 0x7, 0x0, 0x0, 0x3, @perf_config_ext={0x1e37, 0x1}, 0x20012, 0x1, 0x3, 0xf, 0x5, 0xffff, 0x9}, r0, 0x6, r1, 0x1)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
r3 = add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="e8b9f2a9237bc8b8485d2d19a4bfd6573047c19da62fdcd5cd2ca186a99cd47e48310aa808629cf8387c202ca7cd520953e99a366e9437d530da436cf680dcbfef070b7d55853f979784b3e05488b1db73d267de8a0f6913ea865976238be684e1a4c1bf0b6541339676356a38a05f319a22809cbe9fd8", 0x77, 0xfffffffffffffff8)
add_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="f6c1fe5498ad3ce419bcaedc17c6978a7c06841b493100584cda3b1b96c7609a08441178ca77a177010eb82fbe1f8a77bd64b6219687794587f1369e4f51dfd96d0ff66242ff0ea482ded2b28146c7a22437b3d1eb5c329f8042fabfe8e366356c8dd25f4b2379", 0x67, r3)
fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, <r4=>0x0})
ptrace$setopts(0x4206, r4, 0x0, 0x0)
ptrace(0x4207, r4)
r5 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb9\x00a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write$eventfd(r5, &(0x7f0000000140), 0x8)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0)
ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000000)={0x0})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getrandom(&(0x7f00000001c0)=""/88, 0x58, 0x2)

07:02:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)}, 0x10)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x30080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  361.342892] binder: binder_mmap: 23163 20ffc000-21000000 bad vm_flags failed -1
[  361.351384] binder: 23167:23170 unknown command 1287161136
[  361.357045] binder: 23167:23170 ioctl c0306201 20000300 returned -22
[  361.364728] binder: 23164:23173 BC_FREE_BUFFER u0000000000000000 no match
[  361.366426] binder: binder_mmap: 23165 20ffc000-21000000 bad vm_flags failed -1
[  361.373615] binder: binder_mmap: 23163 20ffc000-21000000 bad vm_flags failed -1
07:02:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x24)
inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x80000100)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e)

07:02:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xb, 0x8013, r0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
r2 = gettid()
wait4(r2, &(0x7f0000000000), 0x3, &(0x7f0000000080))

07:02:16 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
ioctl$RTC_AIE_OFF(r0, 0x7002)
exit(0x0)
sendfile(r0, r0, 0x0, 0x7f)
write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x8}, 0x4)
fcntl$getflags(r0, 0x40a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x2, @loopback, 0x8000}, {0xa, 0x4e24, 0xee66, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x9, [0x6cef100, 0x7, 0xfffffffffffffffa, 0x9, 0x100, 0x6, 0x4e0c, 0xe2e7]}, 0x5c)

07:02:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e5180810007b"], 0x0, 0x0, 0x0})
inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x20000020)
rt_sigreturn()

07:02:16 executing program 5:
getresgid(&(0x7f00000002c0)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000300))
r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2)
fsetxattr$security_smack_transmute(r1, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x1)
setfsgid(r0)
memfd_create(&(0x7f0000000080)='\x00', 0x2)
getgroups(0x3, &(0x7f0000000000)=[0xee01, 0xee01, <r2=>0xee00])
time(&(0x7f0000000140))
setfsgid(r2)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000340)={0x3, 0x4, 0x8, 0x0, 0x0, [{r1, 0x0, 0x1}, {r3, 0x0, 0x37a4}, {r3, 0x0, 0x1}, {r1, 0x0, 0x2}, {r3, 0x0, 0x9}, {r3, 0x0, 0x1}, {r3, 0x0, 0x1f}, {r3, 0x0, 0x9}]})
r4 = getpgid(0x0)
getpgid(r4)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r3, 0x0)

07:02:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@local]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  361.469404] binder: binder_mmap: 23178 20ffc000-21000000 bad vm_flags failed -1
[  361.482848] binder: 23184:23191 got transaction to invalid handle
[  361.491223] binder: 23181:23192 BC_FREE_BUFFER u0000000000000000 no match
[  361.498386] binder: 23184:23191 transaction failed 29201/-22, size 0-0 line 3018
[  361.511755] binder: undelivered TRANSACTION_ERROR: 29201
07:02:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:16 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x82)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

[  361.599481] binder: binder_mmap: 23201 20ffc000-21000000 bad vm_flags failed -1
[  361.609843] binder: 23198:23203 unknown command 268966117
[  361.613609] binder: binder_mmap: 23202 20ffc000-21000000 bad vm_flags failed -1
[  361.615882] binder: 23198:23203 ioctl c0306201 20000300 returned -22
[  361.632821] binder: 23210:23217 BC_FREE_BUFFER u0000000000000000 no match
07:02:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0xfffffffffffffff9)

[  361.643448] binder: binder_mmap: 23202 20ffc000-21000000 bad vm_flags failed -1
07:02:16 executing program 2:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00')
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:16 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000000c0)="dcfcedee7bff423a9e07c86c70a98d44d961b8d8e1d2be53f4ee48c48e02c0659307dd64dce708e01065ce240f6a693b1eb64963ee7dc6b210b5efbd3ebeee3ed6aff3501efa4c445e97a95df79b9b6257f5af6fe057487aa8c7062947423a324b8ed5611f67e38d0833fce00db698760ca360f348be978a34eae0ee8bc520f0350ff8045319b3b03d2f44a9d158b14da7bbdcf4238d9f214fde2e17330c7f4b280c6f4bea190c3a81d123b6189e52cd7143227a12081407e145eefdbe798ce47ffce6")
exit(0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x10001, 0x8, 0x7f, 0xc8, 0x9, 0x117, 0xffffffffffffffff}, "c58938fbc54be0011b804d444c4e4c2287a8988ae7aae6728719de2e06412ace4b3ea57d16221d83271487798ce4ee7bec10697181b910ecbbf87eed998a6b334f371034fdc7013d29acd8d8b9c4d7311e5501aa5d10ff33711e001c12e4acb1b0ac12a2add7a17e66edb285583cb8311a2407c319cb4019", [[], [], [], []]}, 0x498)
sendfile(r0, r0, 0x0, 0x3)

07:02:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:16 executing program 5:
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="c3ff6319d3b7f7c0ada0788f5ab1941a16769c394611ed6cd81f129d3ed31ca71fcacbf8b8e58992ccad1681f6831545342b7056cfeb047011342a58a5be4da49d20b083354ccbef1ec2e6ed72b505daf4a24d642db15af8a01644f086eb7bb622cb43cbfefd6daebdfe1ea9bf6a12eb575682aa02166c8ef091b850eb0f732f6e4a667d7f022439300e27935aa2b05f71e8b93858d6c98963522679614040fe2e8e9d82c9e0c650d2fbdef8ae56b404bd2a293d94a1cf6582adefe2eb6d650f69662e3b3122e68f6a840d778ab55409afbcd8", 0xd3}], 0x0, &(0x7f0000000340)={[{@orlov='orlov'}, {@nobarrier='nobarrier'}, {@errors_continue='errors=continue'}, {@quota='quota'}, {@nolazytime='nolazytime'}], [{@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r0}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r1, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00')
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x19, 0x2c, 0x4, 0x8, 0x5, 0x8001, 0x6, 0x81, 0x1}})
getsockopt$inet6_buf(r2, 0x29, 0xff, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000)

07:02:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x200, 0x0)
write$9p(r2, &(0x7f0000000140)="7ee79dea9c32736b70161948c6c0c07abbebdf71759c0702005393a3c6e5da0ccf76d7d158b676d3bfd7f798b01b92451ec41aa24c670cf3a78e070b946703ea0a143c299d135100415e249197b9a962bb835d9afd56831ac52535f97e8c801cae70a4365cbb58fc217a31a0bf5e89f1cf81c29fe31e6f5bf59a2004f530c0401dbb2de118c540ff", 0x88)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgrNu\x11e\xa2%z0\x00', 0x200002, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe050}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc206}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48000}, 0x14)

07:02:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  361.712215] binder: binder_mmap: 23223 20ffc000-21000000 bad vm_flags failed -1
07:02:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x4)

[  361.783271] binder: binder_mmap: 23237 20ffc000-21000000 bad vm_flags failed -1
[  361.786308] binder: 23240:23245 BC_FREE_BUFFER u0000000000000000 no match
[  361.791718] binder: 23239:23242 got transaction to invalid handle
[  361.812855] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  361.818939] binder: 23239:23242 transaction failed 29201/-22, size 0-0 line 3018
07:02:16 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x840, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>r2, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x1, 0x10001, 0x1000})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={<r5=>0x0})
r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x13, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12634840010000000000004cda3d00030000000600000000000000f8ffffffffffffff0000000048000000000000004820000000000000d7c1546949c09b762da6e2a145d6cabf728b6c9300005e186e8484bdfe72dcd57b0392216af1229bab600c4d23ef07534bdb43d7e20c613e50a7ba4883f5783cd3ba528972925acd4a7b2ccb8fc2108c913b121f26d7a2f78a51f2c666ed560573fdf0492683d0210aad8681d62ffc1e3c06a172c6fdfc46ec0733e5a47d6036c6e1e6f8f19763b40372c872bb", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a627300010000", @ANYRES64=r4, @ANYBLOB="0000000000000000852a6a7700000000", @ANYRES64=r5, @ANYBLOB="0400000000000000852a68770b010000", @ANYRES64=r6, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000048000000000000004800000000000000400000000000000018000000000000005800000000000000380000000000000000000000000000007800000000000000"], @ANYBLOB="0100008000000000"], 0x0, 0x0, 0x0})

07:02:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='GPL}\x00', 0xffffffffffffffff}, 0x30)
dup2(r0, r2)
dup2(r1, r1)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5595)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$revoke(0x3, r4)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  361.843580] binder: binder_mmap: 23237 20ffc000-21000000 bad vm_flags failed -1
[  361.859806] binder: 23253:23255 BC_FREE_BUFFER u0000000000000000 no match
[  361.877449] binder: undelivered TRANSACTION_ERROR: 29201
[  361.891847] binder: binder_mmap: 23236 20ffc000-21000000 bad vm_flags failed -1
[  361.915603] binder: binder_mmap: 23236 20ffc000-21000000 bad vm_flags failed -1
[  361.934931] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
07:02:16 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0)
write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffb, 0x8)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  361.943135] binder: 23261:23268 got reply transaction with no transaction stack
[  361.964534] binder: 23261:23268 transaction failed 29201/-71, size 1207959552-138646913024 line 2926
[  361.981415] binder: binder_mmap: 23264 20ffc000-21000000 bad vm_flags failed -1
07:02:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x840, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>r2, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x1, 0x10001, 0x1000})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={<r5=>0x0})
r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x13, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12634840010000000000004cda3d00030000000600000000000000f8ffffffffffffff0000000048000000000000004820000000000000d7c1546949c09b762da6e2a145d6cabf728b6c9300005e186e8484bdfe72dcd57b0392216af1229bab600c4d23ef07534bdb43d7e20c613e50a7ba4883f5783cd3ba528972925acd4a7b2ccb8fc2108c913b121f26d7a2f78a51f2c666ed560573fdf0492683d0210aad8681d62ffc1e3c06a172c6fdfc46ec0733e5a47d6036c6e1e6f8f19763b40372c872bb", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a627300010000", @ANYRES64=r4, @ANYBLOB="0000000000000000852a6a7700000000", @ANYRES64=r5, @ANYBLOB="0400000000000000852a68770b010000", @ANYRES64=r6, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000048000000000000004800000000000000400000000000000018000000000000005800000000000000380000000000000000000000000000007800000000000000"], @ANYBLOB="0100008000000000"], 0x0, 0x0, 0x0})

[  361.992710] binder: undelivered TRANSACTION_ERROR: 29201
[  361.995786] binder: 23272:23274 BC_FREE_BUFFER u0000000000000000 no match
[  362.012502] binder: binder_mmap: 23264 20ffc000-21000000 bad vm_flags failed -1
07:02:16 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
listxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)=""/246, 0xfd60)
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/60, 0x3c)
timer_create(0x4, &(0x7f00000004c0)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000300)="cf09157589f36c708427560e6417c293df13fb9018448e38db532f448370dea185f0844927c6cbca1520111ed367b076b6d8ca8572bfe53ce430a589faa043dc4315825efe6ee752238cc40f0b48f2ffd7c97dbdad0f0b79a80ca8ce5077c37641efd289bfea2b4df1d5263fb164d58656475b34be4b23113f92df9e409ba744f324135090ed10d1e034f05242d85e3339c545002da95ef96bd84394a0a1aa66e46f19d1208afe6aabe68de9b6fa44fd4dc57e87286cb0158c2492f94bbed5713027d311808918a4c67f1e", &(0x7f0000000400)="fdb498d858cf0f11eec722634dec89e57d628cf8e95f5584f93f918c30dac7c9106eaa21d6236987b91f9c674bae2d65b38011cc613f8d697c907606a90f32510b8e9230a41db99a6c36e7259f571c1c4681b26a8ab9f5cf6625c05498b735ba0e2ef265caf2581d290eca24c593fda61931bd7d7befbc2591d09816cf25cbf55f2cc0a94aeeecd1ce33759cf78c5b03e65ef6668e4733b0c947629684918742"}}, &(0x7f0000000500)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000540))
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x402400, 0x0)
connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

07:02:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:16 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  362.061663] binder: 23283:23286 got reply transaction with no transaction stack
[  362.079092] binder: 23283:23286 transaction failed 29201/-71, size 1207959552-138646913024 line 2926
[  362.102251] binder: undelivered TRANSACTION_ERROR: 29201
07:02:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x840, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>r2, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x1, 0x10001, 0x1000})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={<r5=>0x0})
r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x13, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12634840010000000000004cda3d00030000000600000000000000f8ffffffffffffff0000000048000000000000004820000000000000d7c1546949c09b762da6e2a145d6cabf728b6c9300005e186e8484bdfe72dcd57b0392216af1229bab600c4d23ef07534bdb43d7e20c613e50a7ba4883f5783cd3ba528972925acd4a7b2ccb8fc2108c913b121f26d7a2f78a51f2c666ed560573fdf0492683d0210aad8681d62ffc1e3c06a172c6fdfc46ec0733e5a47d6036c6e1e6f8f19763b40372c872bb", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a627300010000", @ANYRES64=r4, @ANYBLOB="0000000000000000852a6a7700000000", @ANYRES64=r5, @ANYBLOB="0400000000000000852a68770b010000", @ANYRES64=r6, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000048000000000000004800000000000000400000000000000018000000000000005800000000000000380000000000000000000000000000007800000000000000"], @ANYBLOB="0100008000000000"], 0x0, 0x0, 0x0})

07:02:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8080000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="41010000", @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  362.112271] binder: binder_mmap: 23293 20ffc000-21000000 bad vm_flags failed -1
[  362.122235] binder: 23292:23295 BC_FREE_BUFFER u0000000000000000 no match
[  362.126911] binder: binder_mmap: 23294 20ffc000-21000000 bad vm_flags failed -1
[  362.145532] binder: binder_mmap: 23293 20ffc000-21000000 bad vm_flags failed -1
[  362.152679] binder: 23299:23301 got reply transaction with no transaction stack
07:02:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0xc)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  362.177877] binder: 23299:23301 transaction failed 29201/-71, size 1207959552-138646913024 line 2926
[  362.209443] binder: undelivered TRANSACTION_ERROR: 29201
[  362.223682] binder: binder_mmap: 23306 20ffc000-21000000 bad vm_flags failed -1
[  362.243243] binder: 23304:23309 unknown command 321
[  362.248324] binder: 23304:23309 ioctl c0306201 20000240 returned -22
[  362.272422] binder: 23304:23321 unknown command 321
[  362.280001] binder: 23304:23321 ioctl c0306201 20000240 returned -22
07:02:17 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
nanosleep(&(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
getrandom(&(0x7f00000000c0)=""/169, 0xa9, 0x3)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r2 = getpgid(0x0)
ptrace$peek(0x2, r2, &(0x7f0000000000))

07:02:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="118dd9c308d813d648244422f911734840aa22a3431f5c6c19ad58d13e73a9754b020398d284fec0ff1cace8b962cb322d5bc5217c0f44c3101a5eb50a950381eb1d39b783e0dd711d4f08f7d6192d6a77f3985f42bdb7b96a3dd25d75807c6036b5c2a2a9e66ace49b1843a5fad01a9ec3c49d38ea8f21ad36ea1d1673567c450"], 0x0, 0x0, 0x0})

07:02:17 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

07:02:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000000000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = dup3(r0, r0, 0x80000)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x6, 0x6, 0xd, 0x9, 0x4, 0x3, 0x9, 0x2, 0x7, 0x6, 0x9619713, 0x7ff})
syz_extract_tcp_res(&(0x7f00000000c0), 0xa, 0x205)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x400, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x57e, 0x4)
connect(r3, &(0x7f00000002c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000d7, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84081, 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)

07:02:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
r3 = getpid()
setpriority(0x2, r3, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40c000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8, 0x0, 0xff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
open(&(0x7f0000000440)='./file0\x00', 0x44000, 0x4)
pause()
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00')
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="e4ee5831aa6e69197876b9d7bd873af5"}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
lstat(&(0x7f0000000000)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='em0\x00', 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r4, r5)
ioctl$KDSETMODE(r0, 0x4b3a, 0xf3)

[  362.796283] binder: binder_mmap: 23325 20ffc000-21000000 bad vm_flags failed -1
[  362.803815] binder: 23326:23333 unknown command -1009152751
[  362.803826] binder: 23326:23333 ioctl c0306201 20000300 returned -22
[  362.805955] binder: binder_mmap: 23327 20ffc000-21000000 bad vm_flags failed -1
[  362.830879] binder: 23329:23332 BC_FREE_BUFFER u0000000000000000 no match
07:02:17 executing program 2:
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x802, 0x0)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e, 0x0)
io_setup(0x1000, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0xa, 0x1000000000000000, r0, &(0x7f0000000240)="1a9119510976c34078b838d60da916ea616466926b887e6573f1a2ec8df127a6618a65099c0aa56a3811e6866da07bfcd6390d63077108169f423fb6f0e99d1e0c5456e00d54755e967c6a66f04d0880056050036a97215b6fe415c3c02f36d51ed3e25841525bccaa5ca31e96c671f2f7a78cc1e9a49b92da080166e4a6d87752cfe1b3b619ef1de601bd38e8b85480b890e9469cb6fd529d0bc8122787c529ed1cbab4033d446442488c2edde696452e4985e6eabd", 0xb6, 0x87c, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f0000000340)="97b3319221668011e80f45527105eac3ec589987d4843578f39237c3768199722b9bece8cc598415be3455e49bdd0012f2ad42dc84349476722f19c3c06a913d42fdc966969a5639c4770d483ed1eafce1ee7e3632079d1b83929fa126ca8076709c54d0be6ef256c1f663e9fa99645c2cbe06a399fe39f0660b4f249a0a734175db0fffaabbc10dc4e21ee6011a69bf93cacc93e19dca6aa2362052525fdaf3d86d4f8f2877fa23c778ea9f4930fbabec77f2e7a9f934490fc21094d60ca269abed0ac1803eb5b1e4a7d76aa636d06f75b57a1635cccc786900283fe7310f17d9ed88e879da3cf19d4b", 0xea, 0x1, 0x0, 0x2, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f0000000480)="566f24e6660d5a6234924bf785ff403577a8e03253f5f9002237909d73512706c179b4d0", 0x24, 0xac26, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000500)="cee2f795318f08e8d07643fa4bc4df9e070942cad7d1f6ee1fb12c548597e2cf7b58b856f413cf5bf597c972035ffcd512408b85023eadd2d03b6b87a09e9754ab26b96ec52b7ef5375125045bc7e585c3ea347a459af0c7fdec7bce26263655124610bc0d8ec4127af9c06459e10a5a3492af0b0a4ee68a1a460735b9507f64efbf987689c5b3f931f518f6bf8bfa5f36dfd5311c", 0x95, 0x0, 0x0, 0x0, r1}])
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

07:02:17 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@remote}}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
r3 = getegid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES32=r1, @ANYBLOB="02000700", @ANYRES32=r2, @ANYBLOB="040001000000000008000100", @ANYRES32=r3, @ANYBLOB="1000feffffffffff1f04010000000000"], 0x3c, 0x1)
sendfile(r0, r0, 0x0, 0x3)

07:02:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000180)="2ab5e39648d9e8eb9aff3a84cd08b46d5e993e2ab6c20642489b24e3055e54133af6dea9e9b6e2f055095ede9bb13369d8ecb45574c81f627820c687b8ec006ebf1e8951edfbe3bf76230cfb1ea0d59349f0385d78a50a71f327b38ce2743589971bf34ea53822", 0x67, 0xe807}, {&(0x7f0000000200), 0x0, 0x4}, {&(0x7f0000000240)="6b405445d40597150b60013f3a3372f379bc5480d9f9c0419c72a1b385a5b2d53262ce3dbb0681ac411b408f785bbf9e39fbeb8eaeb82b8a010e5bafd81efd51ea879805a88c2372a992eaffb48a4c286b175b64d0ab1672207099ff547b", 0x5e, 0x8}], 0x100000, &(0x7f0000000340)={[{@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_winnt='shortname=winnt'}, {@nonumtail='nnonumtail=1'}, {@uni_xlateno='uni_xlate=0'}, {@utf8no='utf8=0'}, {@numtail='nonumtail=0'}], [{@dont_measure='dont_measure'}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x33}}, {@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}]})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x80)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  362.892720] binder: binder_mmap: 23339 20ffc000-21000000 bad vm_flags failed -1
[  362.900739] binder: 23340:23348 got transaction to invalid handle
[  362.916581] binder: 23340:23348 transaction failed 29201/-22, size 0-0 line 3018
07:02:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf250400000004000400080003000100010014000100fe8000000000000000000000000000bb"], 0x34}}, 0x20000801)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
getsockname(r2, &(0x7f0000000280), &(0x7f0000000200)=0x80)

[  362.979196] binder: undelivered TRANSACTION_ERROR: 29201
[  362.985538] binder: 23345:23362 BC_FREE_BUFFER u0000000000000000 no match
[  363.006990] binder: 23345:23362 ioctl 4b3a f3 returned -22
[  363.021024] binder: binder_mmap: 23366 20ffc000-21000000 bad vm_flags failed -1
07:02:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x80951, r0, 0x0)

07:02:17 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x103ffffffffff)
pipe(&(0x7f0000000000))
sendfile(r0, r0, 0x0, 0x3)

[  363.041127] binder: 23370:23374 got transaction to invalid handle
[  363.050695] binder: 23370:23374 transaction failed 29201/-22, size 0-0 line 3018
07:02:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xfffffffffffffe6a, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})

[  363.092253] binder: binder_mmap: 23376 20ffc000-21000000 bad vm_flags failed -1
[  363.105252] binder: undelivered TRANSACTION_ERROR: 29201
07:02:18 executing program 5:
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
r1 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="7240782b0442bb3fffe581b6216b9c7ffc4b85", 0x13, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ae9bf8859a64b73cae3aebb1104e7ce5cad7584dc47d5b625123c81c82cab20ddfbb6fbd75", 0x25, 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r2}, &(0x7f0000000280)=""/226, 0xe2, &(0x7f0000000480)={&(0x7f0000000380)={'sha3-256-generic\x00'}, &(0x7f00000003c0)="d794d3794c3bd99458c860b3bf9f8bc5ba30d1236edcec13c72f2daf2de552cb5cf1fd78ca11772faa273f2a1c2953f97ba8c2b248beda3a40aae6fec871469dbd103b1d6e431cd7a3254ebf86cdfd7549fcf07c1ce94490b1b716e6594c2c0d5059af217372c4c71b768209509f8a6b2cf71fa6c8553ae4f888cabc3f46fdd360cc02433252edb4f5612740fdccf5af842f713634fe3905703b294f420e8c1829d92e40bb47ead81c15", 0xaa})
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r3, 0x0)

07:02:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r1, 0x406, r1)
r6 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10800, 0x1)
r7 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x40)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400204)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r8 = dup(r0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2ac, r9, 0x900, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4814}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @rand_addr="950df0b1f70916dd9f36279d239e898d", 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @local, 0x8}}}}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe406}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6425}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe27d}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff80000000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x154}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x50}, 0x4000880)
r10 = getpgrp(0x0)
getresuid(&(0x7f0000003a40)=<r11=>0x0, &(0x7f0000003a80), &(0x7f0000003ac0))
lstat(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000003bc0)=<r13=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000003c00)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000003d00)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003d40)={0x0, 0x0, <r15=>0x0}, &(0x7f0000003d80)=0xc)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000003dc0)=<r16=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003e00)={{{@in6=@initdev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000003f00)=0xe8)
r18 = getegid()
sendmsg$unix(r4, &(0x7f0000004080)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000000580)="1348cd4a9bd17fcfc6463dba10740a9244f4b0224557a7cdabd49bf7e7261c6be53b4e211907c2a14c7b2345f961c8ea2c01e6e709c44704c6a4e32bc68d326c0a8aad6cfa2ded5bbfe6828d1e331ad9527b2ded027bba4abf20f1e079a7014b784a56670e1e9b1bd27e04faf88c18b39084ff6fd976", 0x76}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="9a21c5ef58ad6bd88516daa16e7da2ec218b4090c94e7ef7eab45341b493008572d52f3ca9fc97f38df7f52a9fd1ca639e", 0x31}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="e9f1ba9482f484f24589137318702030cd87eab78806ee561fa511b5b072748abc8932f0ad61a805c67786cc87dbac1ed7645b7b6ba85318583c81b19d6ab5b5f02548bde94f113346fe34b0a62897c968b7cedfde570e5b4fae2d89980df7d9f5e35913ff5054848938ca08b99436b28d6e51a51e21434d36d6e0ec6167557dd946b8a7828b09b3fe0429d6f350d012af7b64eb3f261ab9a8cbfd0814382272860be00c08ed9a3f240a97fcd67e11bea2a93634f2bb", 0xb6}, {&(0x7f0000003700)="268517e1cdae3820b16fe81294856c75bb75a4651118578562410fe83ac27e44671de2583a1633584c58a6db4db94cfaa30b02ca7ab6235ec7f4f80f75371d4c45703b0d409aec4081b8299f20ae8961963eb8e402aa78eedecb9c53fc57fe64b52d5dcba2b42c2cf95591bd38044d0366e036e8454c66966dafd3c1e24e86efc9ad5e4bccf55188357138b49b100dddf30b5f0d5aea9dcc563add213cc7602265acac8121a5d42d1ac3b4", 0xab}, {&(0x7f00000037c0)="be1f0c99c0595f9d950c332d06e85470a7fc0260a5d50fe539301f52298986357b3a4d6a31a662a7423580fd66ed155c", 0x30}, {&(0x7f0000003800)="b90ff4ba75ac81c960aa75b1efc45ab2ef526fa10cce010ffdc9c5ee13eea619e2503ea20621821c12fa576bf9c77b925e2be134a465c94648cf3ae341ea697829866d76b1f6fbd34d4336bef62e9cce75d339c4900190340c8d1cf3fe86c6bcbbb4f6f89e02baa9c9aad895e0f6250c", 0x70}, {&(0x7f0000003880)="caf27a0daca0eeb221dabd5e4a24eb03a741e8111cfe0b1220b87fcbacebf6b0a00cd1e19ac50c5b87a1174b74245f602256e5593a4195762f22aa3ae8fcf368d2380e35d2ab85bb16bd2f2674eb9e003e11d48e87ebbcd1a62e0dea35d8c41da252735b17d14bba13ca506330c14932ceea5a1e3f24da689059371f82cee781812dbc9d8c9abdd1dd9f8db7bbff079c5c1898687d3de7b5ff48a3e07e2060388c84dd6450a93e02840d3f73883c8760667b02b15b23fd191a739c2670229be57555948fd4c1301b9ab8309e5b7fc09236b27dac82eecb5b439740ef924e1cd73d88607160be8d6950779efa99d6890c5c", 0xf1}], 0xa, &(0x7f0000003f40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="000000003000000000000000d4b6000001000000", @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x8004}, 0x40)

07:02:18 executing program 4:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000010c0)=0x80, 0x800)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001100)={0xfffffffffffffffd, 0x4, 0x90, 0x1561, 0xfffffffffffffffa})
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x80)
sendfile(r2, r2, 0x0, 0x100000001)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
setsockopt(r2, 0x3, 0x2c, &(0x7f00000000c0)="cd6a43e131fd974c8bff76acbd08e47e54563ff586745b85b9733dbae1a1ce1ccabaf17fb70fa07da727228be694e619d28514696db99528e95979c91ac57ad3404294f7a8af1a42f1909a0fefbd40ba50749e8524add95b9a7ed9e8525aa63e10d466d294ef8b23a558b7be041e16fa1d8f1e5ef7d8d2aa8f8da82aa1dd734b82fd57ae2bec3ec59aeac8ed292b27b527b72ea94af81db69e65c3902a94b39bf5a90e80565e3444fa4cbb1af6f8a0c1f9ec336541f7ad6c68920838d16ea35361789f407843e308f2e656713e480ca3aa857698efafbe12cd487f893a22b551321d75baf81d35efe4e7c8e1cbcfb5829845397061f787c5079096c4e623b6c4f47f64d0a2953b878939b086a9b1126b765513db6b19a87ebe121954dbc3490e4d9f95e4729d977909e187c4346e85bd98b6cb5af039c9b06a621fa0797f1f524d21bd249e6a819765130552a1d38a52045e9795a106bf1a7563af9a2c02a2ec6b0121b127d1857ad9006b8c6eaa965e702af86d95adbbcc3c512ee7d6f9e131a54bdf20aabcd4ae5ea597b9b6b7dff7f13acf57d51dbfd413657cee84868400b84984e6d335b244470c0f56313f5c45c794f2703719e426192b48a6340f077946e0d769d7f93e7d7d08fefbcb2e64dc8a1f6e7b87388ab41e2fd253534a9e6b210727b3d9b12995353d22350ebde353e1674bc780f12d689ec45cef5ed6af03633016edfb534d11b9387fbf793cc7b4d85078aacc95511b040095a8ea544c4540efa79063435d1ab64da533fd812e96fd9f10312f0d4f060f0fe345b2757475599fc9c688728266275d71484764fbd92de4c88d1445f19fc79f786a17c12758bc4840c99339534b19eb106da21081f742aaf6a72583573eee16bb4d2d3cc7611862a9b07d362b62f35fdc147cbd12b3b7b9b44cda40e5bd08d86fb17e318b1f3986327807ef60b165ad756cacc440d47457cea893ad904cc221f461b0d77e6d192d67875fc33c8a7ed0e94cc54b092409643fcf42aaa4ce0b25339fd83f7ae6d9e1cd9a67c5fe259ee61cfc7f7bffc52250b171acf667c7faf9ce4dc9c159d9fcf0e7a225b53627b559de52e8fe97a9f0979658e5a8c0b6a3c171512e1d8f292c7791f0edaf9e43025b72d3f1f7f7f7cbb687973f22552b6236d6df55b2d361b37359094f64fd34edd7f0af1468f70dbb93102bbe10378af6be21586cfd29ef5991b56a224fcd7ad87825221b292c9dadcf23abe33bb7125e3340eb30ec1fce97d78e6844bcfc602076dbefbcb2f95f18e3bd9ae946e795c512ff55949c0f60d474de53b65bd74ad10d2b118509838f7dd01cd37fc709d5151548a26e4eb1acd59509f67918276a4d2eae630b4735ef97129bfc341a8f79dbadb8c045a67daf70e885ea8c16580373a2dee957b7366c21a939a3b8279a118b1bd5a183037bb80fa63684a75f3aafd3094fff8d2607206eef601ebb0adb4f52fd001362ef78de8ac7006d5224253dbea2bc3c8092f91a489bf318297864bc72d5aec51e8f6219fef26a604868b88b68856be49d3905b4c8ff3bdafb7dcc9bf849c74f85c46c5b3ed2810b7f0c22f1c2767d9b9533b2013fd23c8100746bd27b6e201076686f6d8d556087ef40566e5f03663e6c5e821d6ea709be7694c30b7004bb8e64312853fee2aa450c6bad0ef2375a46ba8f753c449d02f299a8fa9ee9497842d2ac6140d8bd9ab00cd31223c12582ebb2ef46f356cb3c2e79d1571580097bdb9fd2a94e5141c21833607d82d8b7c1347d585a356825345f2a71d461dbe3545d1be2d66ff25322409218d800bf01878165c3d8ef0fdd4fc93138acfdd0c86b00d70b93214dd576c0e1f7945a203c4ac55f6c148143c9974217f7f23062f141957cfa78d3fc16355bdd279e03a38fd12d411d558569af641757af30b38437d235a6f61202a5afa1618f31a582f5d79caf4e1d6d5cf2d42a66b43fc2c5b334c7abb8255cde79d0c22a319eb76e2ded4111076e5f3b2415ec9faa446bb8a436e2bcf13fbf3691c7b1592274c8b0e361b3d0f75c3ee4e60f0d695644f6a3cc1490c744e37fcfcefa0725426623d3170f6c936cff4a0f10fb697decc4e570570211b2d7d2beddcbe53481eb7632788c5cf8388e9931c2320edbab5f1af64395d70d56d18cb82ea94678ebbb02bca56f06f5d9669f7254400f27a2079ceeee1508a3f5d01670ad8518d4c9e259a2fa2b7e2b76470cfb2a33e9d2abdb70706f07d8fc906cdc1b8569c9b4245970fa66d341db994db2669a7d35b9ee837839291e78305531bcd6642c9f340c77925e03bcd3365f5bad1780f206cd5d6b6a80f87ff5ebfe9fc6fcf724f2417c8bd97c81687071473eb23fa4796de8eca2955a2943dcb35fa16a875d2e8e75340862d0d43e101a7ff5f6f48835cca2acd6ef0fc1faabb0399563b77cb6671a8c767836b8194aaf26faf6e4bfa10a7b0799ae399f423720e3fcdb6cd764708359bd42324473bd407e115aef2c85d5a3ab16af82a27c47eb5d69b6ec30a4dc54e8170c29e87bf01dc7e646c9fdcbac391193b6a1a6efe748c786c8df4a12dabf34751ac0af1397f356e5160ac779c1474e9a3a6f2303a65acb48f15b4c6bf501050b59f24827c90d79e8c61183aa9e29df962dd1d64a279ff67b242259ed9f764c065c78f92ba5fa961909ace5427b696644238f2fcc28d30d6beece655568c6af55ffc4a034cabb4a6ab4473fc1bc3559747d0adf73a905ed42b7853bbbafc8c6144098feb9150af47df6eff10d92a6cde43815540b1145c17607f99937d72d31dd7b710598975afe5703c0aa50e0cececc383ee9ede1f6684b56d45d906334ada6501c678c834928525b1790ec500f2d9e29fbd67a567931bed19080f4362ec61fdf6066032f18e2b9a89ad33fb245ab2c0db0f5fd0cb761aa651697f7d3d27b78b789b8b65c7bb4c7d0d7ef457c57abf85a8a17b2254aca28a4f4d6acae4333c5ccb2fb7ffbdfe8647ab38d5b47a06120019c8820351fde06a0f5bbca2289e4e152d340dc3f000696ed79626914417de8f54a8e02ce9bcbac89b731fe16444cbfe61ebaaef89e1b1a6619014e2813a21fc66fcc79305a28278539b10875e08eca6ee4de214e42539fa9510271749d4c3f4e6ab777e96b3cb1535a1b90419f1d5f433cd2284270a16f8d88eb9f0535989c5e73f1fb8395fac453fae49c925d59a848baa6595e29341a8bfb4ecb7950d743017a604340e3ea92d9b9451f6284188f6efe39e795d66f28b359c64d96e205b52fa05a11b469ad457124503a5a3fbc2362c6c940ac32b1588f25b7a273db6b2ab156cbf0d63f779034a83b5fc9d515ee2a9efed4f3a35c2518d079ab50595ae2476e2e436a58489f51ab586aaf2fb86e49ea18783efc0525d09ec16804341d9a82f8c328250786ce75378b3d2848b798a8a55d25f52481e2b75031f34665de862f09216109c3e70d75b385f7502d1ffb120f979586aa42ee3909e350325576bc9c442e05c045be77c2033ea2e7c0a4a8b747955d727f84455e399d97faa7e341ef7208fafc50dc903df3dd5466b48a9861fea8bbb7ce00ae0c93bca1d2ecd1d7b3282d505f4b6bec9fc7b7fd93406418dbff33764e3561e182cac7d7c6306951a5c30a4b2d564c77224c919e7bc8c081273539f26cb2c0b0061c753108280bf5614cb3ab36147e082cedb51bd72081bc4618e34f39fe91d3a7c5958c6ff7733fe90119544e25622db598c5b0da16793942ae725e5c4c12f03924eb0baf5b5cc51e3ee7242fa0a76b3b6895943a7facd5243aae1fa3dace57a5657d0795d4401122c0578370c04d25d68dfddf37792aab392a891d40f12861c1030ecc98b14d20989a2fccb465b1e3e4f5d406da1636c990dd216d06c6dcabf1256c53e465a999f2464964f83d2c0dfc9037b3db4667ca60aa210098186a42a93f41066708d450082d77d915dff586e7be9c328161b740bb91497c93b3eb143da2382b9be07fb28393761de18ae7b53c9d5b0877e38fac8d77eb4dbbcec5daff0dec96d314641ef41830bd87667714abeab8088f61d154af08a511d46b2f09047ab82e6baf638337a75c233324916b8dede4f7118887e13d23e9ae2abe4d15877ce65b92e0cba9da9dbf26c7099284158a5e454b6b7ebe8ce87f9456e0f83791f30a0870a6a95d2bef2b855e1a6b03ffe1c546ddaac26bb021954a26cce565f650394d39915c7219676ef3768990790d196dbefc501f960ab0126dc8ba8a8181a55dd83af7b0b9c2530547758d9451e27c62959b9bfd523e4f6b3f897a20e45d2e847e18bacd96d4820b2ac47f25e0f52f3791338604e65f9fc2fe8358ce2f90cb0ece87f81e5485e99709c2512bad177c4520ec3f8837fa19f0e89d65d045eed93455af5a257f1f9671e89d985e03cddd61534b5eacc51c9dd3e78b881584a7688b8bf46139847cdd58055c4057cfd1bb784c6ed0c83f826a1dab589505133654c4aa287ad92ca4486e160577356f62181b61235261f3de138f2cd888ba98a08abc676e5661e00b3f93b5a9d5e92424460ee229f263f0760e3f6484f0ed13c8946d353d50eaab6dca75e47088fa9bfebc001463b3ca9e208bc6ca40897aca9ef8251d1958163dd5f2d5410d7026c6e9173a9858e6cdd4f47172a92244e53ab75f84f869dcac201296d3dc00d6a0f7715a0dbcf7436506c05da04c1cece1e6e404fbcf4381a79d818f6b7663353cb22464d1e9e4bec2ae31a6579dd09efc1cd284cf298595d97a7d447de826ca73cdd6268c109c1724862940970a0008da08430fe3c95c1fafb4f29476e9c6810efc42439a0decaca1f415c65aebb84755957209e6132cee824bd2f988ff353f4a41b1925c3c8eb82666a390952ae4cb52357d4eafee758870560b0ed11793509c668359924bc93fab10e8b0516821d8deed9fdd757a918c759a97d3327389155b7b00ac8c7ebdc53228cf5679a0a2bd9e8217e41793f42f5ca43ce0b18dd4d30e8f55fd3d70899717a22654872c2206a7b7b9f420ab3f0244f8c41ff6d1c38d47e41c7ca661a32b485d41a7e0faa9e53c9747aaa8464d53b57f6d2f5116d6ad66ef0051c2f8206318b24e93fc3431eeb7bd58823d0ce19577840137eecd2b65f0df9835196bc583e817cae984066346aed0fb5ba5a5cb69adf808356b5b8a26e8d0377aa1175061060f54b593fa4295b09ec8511122060a0026deacd01c3de3f56d12b72ad353b4257c64c2e125650585391ae6e70c96b43745fd157932c243ce2012dfa2fa4d224d8df3dff65c9fa8d444ce0fe487ac02c328ed41b6ada979a7afa8182ae34a59ccf705b57e8a088f2992cfc557b4f996f1d7703d6c7e17d82d009a32463be556223ab8cc0c8a168f6caf191164acc7ea7822e2b90a30010b2accfdc7d7499da2f2bb0704837ac1b1a10f798ab1e4b18dd7b527b78b5182a4813a5348bf0bf918f2d50b33f992a0507704e7256edb5037a0eea423d50aa557b4a1d5921b95f3ae696bf573e0101110a0a73f1d2d824872a4faae9dc584dd033d1f2b08179ce8316f6e56a88287486c0ccdd4334ae499f7fe879ebf2bf72f7e47d503993bf6e1c8b832cd364aa0bb3affc8f1e2e1b0692d2ea2c1e2ab08f0d8d25c60a7f78423bb3a6086941f793b9d4b112ff6a8fe19fcd640226ac9bddeaea41787691dd1334ef7d9ee472d6ef5fe0f19b98f2c56d1cca59ef18db5b3ca53d0db242c01e66d1ffd946706675049690dab4f4921bbc356ac2e4989e39fdbb2f5f008ac5c", 0x1000)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001180)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000001280)=0xe8)
fsetxattr$security_capability(r0, &(0x7f0000001140)='security.capability\x00', &(0x7f00000012c0)=@v3={0x3000000, [{0x7ff, 0x1ff}, {0x101}], r3}, 0x18, 0x0)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000014c0)=""/228)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x8c, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xc97}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44005)

07:02:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r1)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffff95f0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  363.348160] binder: binder_mmap: 23327 20ffc000-21000000 bad vm_flags failed -1
[  363.389279] binder: binder_mmap: 23398 20ffc000-21000000 bad vm_flags failed -1
[  363.404905] binder: binder_mmap: 23399 20ffc000-21000000 bad vm_flags failed -1
[  363.414495] binder: binder_mmap: 23398 20ffc000-21000000 bad vm_flags failed -1
[  363.422847] binder: 23402:23405 got transaction to invalid handle
[  363.434119] binder: 23402:23405 transaction failed 29201/-22, size 0-0 line 3018
[  363.475173] binder: 23402:23418 got transaction to invalid handle
[  363.484584] binder: 23402:23418 transaction failed 29201/-22, size 0-0 line 3018
[  363.493418] binder: undelivered TRANSACTION_ERROR: 29201
[  363.498929] binder: undelivered TRANSACTION_ERROR: 29201
07:02:18 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60000000a8430891000000390009000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r2 = perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x5e93, 0x0, 0x8000, 0x2, 0xf, 0x40, 0x352, 0xa5b, 0x4, 0x7466, 0x7, 0x2f02, 0x1, 0x4, 0xa8, 0x9, 0x6, 0x800000000, 0x7fffffff, 0x1, 0x40, 0x1ff, 0x6, 0x1, 0x4, 0x120000000, 0xdcbd, 0x177, 0x9, 0x20, 0x1, 0x7, 0x3, 0x0, 0x40, 0x5, @perf_bp={&(0x7f0000000000), 0x5}, 0x10, 0xa71, 0x8000, 0x4, 0x3ff, 0x4, 0x5}, 0xffffffffffffffff, 0xe, r1, 0x400000002)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630140f41d1444e2e7998145098a5ffa6ebf69655a425de6ecf67cfdf680d975a801bc82df46ff4f6d42586b2029cf22dc982ab397b748e575ee2077d167d0f10353c5014d569c2e820399719e4f90f5d9a3fc3e3439f06f34", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:18 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x300000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8ac4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9e5f}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x108}}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:18 executing program 5:
socketpair(0x4, 0x0, 0xfffdfffffffffffc, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x3)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r2, 0x0)

07:02:18 executing program 4:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0)
ioctl(r0, 0x8, &(0x7f00000000c0)="f9de67d15de2eb8abc804d5c51033b190b356c40dbfc8af2ae320e6606563f686e46d5ca305e8646f69d2ee01a13eb54eecd8adf497de373bc1097395fa8adb342338d727ca1e89f4f6ff0a699b49a88113273d698caf5c4422e4acc15")
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x4000, 0x1a)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r2, &(0x7f0000000140)="2ac75d94589a9a58760b6de77819005e77f80be6eba4717b0cda16d3257dcc2530dcae6c8028fe6aeb4f3177e293c91cb066375f72a8703fae0e434473a3b01932be041725d7ac42dba2c7cce5648dbc09638915df615132fdc049ecec8508889d958065161210f16c611b4c735a886dda5f2b05518b4aa0e1514744d352bcc8c974bfe17d83a55c0d557a63d2581ac75ab9ca9baac1e0f26d", &(0x7f0000000200)=""/121}, 0x18)
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x800000, &(0x7f00000002c0)="1029813bd3e1653c919fdb295b065fd008dbcf5b2b4e5ad4100db84c98885a8d714daca71bdb9249075320772bcc4a5e0f936d89cdb90e1fee07d1e08fbf959d3c683de41fb24f473fa8122e04128a17c03299890f845b582600b31cdafed5a2e5ca233ed8d3d5da3f4214c77b2bf711083e769eb9c5f13d335d64a477", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="b6d738a949b9e35fe6fad0a1d359754c4d76a8dd1d4897ac0cfe6f8e5acdf23e0918d8c2ea5ad31818ebc19203b9ca7cde129a11dbef5a6f37614f51fb5707f44cab6515f684e83bea0635d8751e3d02c603730de292191854aae44e623385b81a1351bf6e7159f87e424c3ae9c3b7e4f9975320e8da407681b2f4c2add388230e4c8f795bd79cf7b113d26091ca8b72b07b21c283c09bb51d3b94639389738ab92f0c22775ea2c340fb78e395a323594aa72f51baf45558dde1e6ca536056ba5e1b10819b0b6aa558e7d30dc823c25fa3b6cc1d5c382320")
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fdatasync(r1)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000080)=""/32)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="60bdd2270100000000000000"], 0x0, 0x0, 0x0})

[  363.690206] binder: 23345:23425 BC_FREE_BUFFER u0000000000000000 no match
[  363.696715] binder: 23345:23424 ioctl 4b3a f3 returned -22
07:02:18 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
r0 = geteuid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
setresuid(0x0, r0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setfsuid(r0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100c0120}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ede7e00", @ANYRES16=r3, @ANYBLOB="02042abd7000fedbdf2502000000080002000600000008000200fdffffff08000500040000000800030006000000040004000800060020000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000)
ptrace(0x10, r1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000000)=0x99fd)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x4010, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040))
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=@random={'user.', 'lo@trusted/\x00'}, &(0x7f0000000340)='oom_adj\x00', 0x8, 0x1)
r5 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x10, r4, 0x2)
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000280))
wait4(r1, &(0x7f0000000380), 0x1, &(0x7f00000003c0))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000240)={r5})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x30, 0x0, &(0x7f00000001c0)="d0f8d7cab4cb49300e2a28586841fccef5c08fd36d95d32868fa2822022f232c4bc968d913e7700aed216a17b78cdaff"})
sendfile(r4, r4, 0x0, 0x3)

[  363.740335] binder: 23432:23436 unknown command 668122464
[  363.746555] binder: 23432:23436 ioctl c0306201 20000300 returned -22
[  363.759251] binder: binder_mmap: 23431 20ffc000-21000000 bad vm_flags failed -1
[  363.769492] binder: 23434:23438 unknown command 1073832707
[  363.773539] binder: binder_mmap: 23428 20ffc000-21000000 bad vm_flags failed -1
[  363.776676] binder: 23434:23438 ioctl c0306201 20000240 returned -22
07:02:18 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, 0xffffffffffffffff, 0x0)

07:02:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  363.812666] binder: binder_mmap: 23428 20ffc000-21000000 bad vm_flags failed -1
[  363.824598] binder: 23434:23451 unknown command 1073832707
[  363.841309] binder: 23434:23451 ioctl c0306201 20000240 returned -22
[  363.854632] binder: 23453:23458 got transaction to invalid handle
07:02:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0363084032fef53873d7a753e6f76031df0bcd07aa3abfe74bf61ccf0204cd77a856eee0c8a09910d45a294bbf19eed5f3d6af641d9ffe8e4fed7aee7db800cbd2caf8eae91eec13eac61271675921fbe231105856721504a8fad937a898e2974d03f751feb71d615eb408db662a20fe590f9700887ef73bf822a262d581db0afba500000000000000000000000000", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x34cd4709}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  363.872031] binder: 23453:23458 transaction failed 29201/-22, size 0-0 line 3018
07:02:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0002a4fdb4"], 0x0, 0x0, 0x0})

[  363.920148] binder: undelivered TRANSACTION_ERROR: 29201
[  363.930796] binder: 23463:23468 BC_FREE_BUFFER u53a7d77338f5fe32 no match
[  363.937951] binder: binder_mmap: 23461 20ffc000-21000000 bad vm_flags failed -1
[  363.947736] binder: binder_mmap: 23461 20ffc000-21000000 bad vm_flags failed -1
[  363.963858] binder: 23470:23473 unknown command -39583232
[  363.977637] binder: binder_mmap: 23466 20ffc000-21000000 bad vm_flags failed -1
[  363.978989] binder: 23470:23473 ioctl c0306201 20000300 returned -22
[  363.990256] audit: type=1400 audit(1553151738.843:71): avc:  denied  { map } for  pid=23446 comm="syz-executor.4" path="/proc/23446/oom_adj" dev="proc" ino=62233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1
07:02:18 executing program 2:
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840348a31d1edb1bc357bccad5d5a6b0dd265065cd2ab9536a0d0a0b0082e3fd4d0cdc7fbf8181ab266c41bd940045cf44dccbcbea9db420d6f9c5a06ad54c6082dc741427f47dcf4f70000000000000000003da52530d9b7354038031f52e017b9be1206dc1c4c1724af8770beac81fdde4d364cbac86d462b62a9b13b956182ca6149029e4a8aca941d605ed26eac1891c1a5f13fcda46e38c57043fd2b9de3a0920ec1242def5f8ed29ad3e215088fb4678a50ec7768a32ebf55a5368149c9660342ebb4c3fa9ac0a50bafc18a2ed8f1150dbbf5eccd0f8a6d934487e1e0e5a699df42bbbc", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:18 executing program 1:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))
uname(&(0x7f0000000080)=""/23)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0)
utimensat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}}, 0x100)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  364.077377] binder: 23482:23486 BC_FREE_BUFFER u35bcb1edd1318a34 no match
[  364.081794] binder: binder_mmap: 23484 20ffc000-21000000 bad vm_flags failed -1
[  364.105616] binder: binder_mmap: 23485 20ffc000-21000000 bad vm_flags failed -1
[  366.560199] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
07:02:21 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="ce820f79df605957df610194cc87fdd90365755d81633372614f5dfe7bfb58991ae663a8d38117c154d944c66c6cc6efe7d26f1f17c19de897d40398baf97a558ead2ab8b1d27f47392f52490ed03a10cab664622b5cfa50d9ff6a487930b10eeac1aac3726b81591d382768d26f383030d810ecf2ffce3e8b474ccaf9c320565d947a45a9d7e9a94d09655bc26edf5b1c6248d41f349bde13886eb17647614a74ec", 0xa2, 0x1}], 0x1242010, &(0x7f00000001c0)={[{@lazytime='lazytime'}, {@usrquota='usrquota'}, {@max_batch_time={'max_batch_time', 0x3d, 0xee62}}, {@norecovery='norecovery'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]})
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:21 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:21 executing program 5:
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x832, r0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00')
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x3, 0x800, 0x1f, 0x296, 0x5000000000000000})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101800, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x8)

07:02:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
fcntl$setown(r0, 0x8, r2)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0)

07:02:21 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x10, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0)
dup(r0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0)
write$nbd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000400040002000000dbe5cffb8c0b02af02fbdd55ae7f14b64fb1280000000000000000117f5b2c69f97131430d0a8bedfe283db0c59ae57fc1f56753c50aebf7f5fdeefe04c67500000000000000"], 0x4f)

07:02:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x3)
clone(0x10020000, &(0x7f0000000080)="afbc0436bc315fe4d29eef6b68ae23b25272c14428321a4f8cb4d8f839119d2a8c38ead855f5d676fa8b75f1f0af80e20480aec6c5448e5cdfe8f248e0096896656f01fe84bb9ab7a534ff7dc761681f", &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="2c4208439d99e30af4acda5918e621b6fb414bebf7e967ca9debcbafca5a4645e49cc68cfd8a98a9d0171f7ec3aad1eceb40a3f7616facc0e6061d2360c4fa6c338ca6cd97464d164bfdc0bc391af2f5a3f53add1fd0f8f84ec159ffcd4a4db029b4412bd5e7ecdcb25b3be850e4fe9d3d40e2a0c7d94b6d679892d6c6f5f2a1173d2b105a0d97f5d9fe99edb7ca2cfc7ea0d1b8ded7a80a9ce1d394443a3228020c2648eef6d3c4e2c407b0d683622d6ec586cfa47c23344fc53e29c640e1a917eee5c268dce212a529df56e49058cda357234025f806aeb00cfd9bcfae9d8392dde6b134768c86eab05260776c5f7e2db541e1f8f2027091fe60a95ef8d5f9c417768a7093d5eba27b329700ee1ed054e7550ee3615e33bfd906a8e9d52fea2f863e660ff559de93c9a98f1bbd86bcb601f1b51b1316232d9b75448eedf634414123a61e21ddc835f699723c77b5526e4150ca91653833ed3208c34bd6fdde96aa9ec01264b5cab0accd45d4ba366b356a78e201c6d30a64ddfefddffc59bc8d41dfa579009c423dfb7ffaf99531cd351275e093e5e6e53a7475311f11b904fac85c0f27649bb0338e8ca68352a0a66eb5fe7891a750e3599ac331b91f68c52d28c20bbabb295daa160a9810fdb2c6ee533b2a379a563df5c6c34d49beee98674c803fbbd5fd67fdb117e1676a4b51e1eba0f5c211466e402488f7b3c398544b5ca11f5f2304500ee2ad1dae95b40658a9e91479dcfb840f55cea558451751eaa3730ae6db9b6fd0ea653f92c22b25c0a680c9db01e5095f76ce293de182cb4a12e1d9a864f4208cc400e4458d71b2cef8e758a59be83e30556b42bed976e1957785ed63756f2de0c88b20aa6d8df91fe19696aa792e53b67b5b989f1aff1a07fcf7766c9a70a322835cc1a8b0e844fd3139401425c182495a1fdfbef4016459dce00d26e0fb32e2fa31ae4c11075cfa35a57be0205ce9718c8e5af1d103ca5bb0e0d35f7e84023e94831316b7bca60510c88ae4052991f63dedd08e029fca041a649538ce90303c8fb47a1876ba6d3839045e1664df9948d1465b1b9a924e5e08338eec95d6283347d45f7b16f10619d12b469b825854154c0b735d8f3fccf53e6b52f15beea0adeeabb335b112baa80ee39802ec8a4b7ccd8534ed3045bd02a757b53f6888d0b9b1d645969d60b0808bf4daccabd5851eec6e5fdd1b8636c9458258eb7b878bba62ec6c30dda9cbc9eb85684fc1a82f06e67075f6da58bc805d47a58c0358c21c600b765526d6b51cf8b2138a83bd9d3e97c7eaaf9fe42a8520d75761f1eef679e2cd5b57734670a5aaa772725f13e964ebbd7d854af09d0698f5b8e095ea0d953fd26214273c3935d392e29a3288e8e03c9262106f744ae8e4b5428a8148678d7537e766bfd0d5dc79faf77a1eb4caa5b1c1d48cd17ab53595492cc2b2141228d477c9aebc4101035c80c4363d792fc3f6798e7ee3db1f2edbdde602c5e0026b20e51b7110562d203068a2ed4899e467703cf571244a7a07284d9f6e005487fc93afed9e398226a8a39d19c786d6c8f442a989092ef1ab0c22aa53fdd1fbe368cb0a1cf49121dfdfb35afc34e70096e0880845b1472e936e3df56c44ea3178196c26033821ff1962012622a6710db739eb894858d8f220c8fdd25a787ea34a623f7c0d782151b3226d787df349301f4ce5258b34cd55dce82a980ae7e28cf3b2ef0c68ea12430f7e9c2f9f310fe9a089f1d7727c134143352c49fe7c0ad6aa6b3dfe3b13f8b3717b2124ca684b0491c1ad54f6db682329b1bd8621d7765096c5d75f0de6932e75eadb10294c1f9b869fb62e699ab1879cb1e430e043ba40b7c4460a8f453b8ae02ff766c2ec2b57d64058f0731e10da5a4784c5a0717d78d5741ceb556c2c9282b30c8764044d9a9c5843efca883187e02fdb318aaf9eae0910c9a1249ffa350b7d386846d656251130733f67ac335d171e4b064b572388ad858c3c3df7c302d7a252d6f859ce36ae469fa113337ddf02c0bab6668a2e42c7690f3120e6b88872acbcd79f054d04c137d09e5928ff571bf8a5c564f97ad4ea8239515668de991ec76e93e7cc8f1193da2265034243cfc36cc542bba38ad2060094672c9953c95e3ce740d3823aa815423328aedaf7223992537886bc57427d748f08ab6a22d9c9d4582ff880eb60b4828254e457d630350de093f1bf362c31c571184290d6eabc6f43c6ca13cba320f457a91affba8572c5e53af1433592e54b773f5732efe5b7d3427b40bf25481e8635f17827e7e2c718fd384a161860c271d00c9d87c9338a3dafa068c728ce72008a571f087b1964e75a1e6a0bb6589131158fb07702607d4786eef393f108ef1ec181ad62413e0900eff244f8ad563341f58d404cb5a487a55ed47eec61f7360912993a4fd7649494560fd57001316c8d41ec92eb4adf37cf53a1fa4bf910b5738a7e039d9772075bbddad7d2fd082aff00269d24425c32c493e8e92db1410bf18adcbf048b74915b0e42b85125840a54bf41a0cf2bab45a60bd06bcfec768e629a1a3d79bffec1f36c6316da0dde12a48eeb3ff79be5afd13d80c500a8d7b6229ce49556d21a20e8b94242d5e9760f5ef392bc13b22c0093eaafa33c48c75492a06e1bbf561897745a6352b60fbc0df5e643d70b555ccda328268469b29e0079a03aa74f0e66e46e6e90e32307e092b90a199d5a935b495c4d1c0a96638d98e92189aec1525ca8020d2760700cc67c0c0a16eedaf4c4f1158854f691924aae7631c01571d396d363d7e8841d9b6a0700aa36393584e2e1cdfd9ce62b961261e0cca998c64862fd82d59ef91dd3a79541afc876c7a06f145a31b533a508ac4fcaa114591b04441ded7bfa73186f78aa1b22aac3788cfd204e33ad480555e7bcdaf3196a9f2747a4ea6b6fcae5a4d7f8c7b4f0831b12dec62f86532fa6eca1b9350a912e82c65f527514f8244fd3aed84a8ac97de820305608288cc47c7dfeb94286a16db436ecbf540c706bfa7fc53be39a4cd83e991fedefa352e43e17c43f904acb9bad3c8a6aad361ae5bb96e4647291e3ca7e3acad5283438a3afc628d4ea62251958e005212f963e60402848d8102979bc9da70930ea7d4de686b92a4db2fd823ed5bcbcdcee4dd26b0ff255bb7f83ce48dfa55ed483043fb0aceb0d6a9257ca3fb44fe8c93ceb67a89d842743776f7d209a27c6a98370c832ea25c3c657c35d2ab705a96f044c75ade1fb3bed4557e1610fbf8bea7bc1fae7d40fa681bdb45dfa9bdc2192765e081e4a36c274fdc68604b47e5e17f78c65bac3f6594a8246b78e1b8d1a39830a5e262daf17a1ba5ba8b670def924e65efd25d591de9f62274acd085cb28c654ae1deea01875378832670995f7b92ca25774058700d28d6fed7c6983d5a135953ba2df11d2969ce7b89c23693ec5ca72efc1b8e934c06015627399d985ab38f6b770d8d26d586c77d1f39cc85e1990bde3a7ba8077dda787e443912b63e7d8a4ed004f642c62034f6d48e93318a5f0515d23c1eaef2ce5cb92a1e564589cc4213e863b78d7ec675abf525d21099441759f6fe0b2a1d1065001e3f72f7cfc8b7abd0393fb1a2cfd06eb1371f7bf6bff7584207402baab11f066d5335a593efc2644517823f17a62cf4ee937e7dbdee8f134434b45c98a241a65f4c4d167be0ec9685838e6b8c9bfa4abc7e2e8aa1746b383e032ed9fee142ceb5c3bab5fce69fe0d115954e3cfac20deac25a067d00bf1393e634d1bd624691eec598e00466fe3aef5de42f68d5ddc682f3d876038a9aad83611a93d65f735faa0c8995e66170a0524bee3c6b9791cad30f5aceef63dc1c30f38b8cdf180c69ead36fb84435a57b4a34fa6e436175c55782d231a32e21dd320e1bbb82566aff9182cb1e9b37961ffa8ed2021264603f84a958211bb2017bb79829e06268299bc54d05d831c8db55b9362753022e3adebcbbe77c28ba46049256f26aff55cd53ac86f4dc58e50dcac452f996e72a34ee4e4cf8937a17f30115f20290aaa9fef633a3e26747fadaf7bce1b9dba00f11bfc7fa7313c0ff51b5c970a95131e45e57757483d7faa5c0e0e61fff69c743382330c483469f77a79ac7a6243bd0f9af1f07859f7c98f35ec831dd1df645ba29cc96a244f6f7fbf263f4b2533e7aeb1c94549e80f3b08794f8d3b010313491ba1b161aeb82b9ccbf6dc628ddcddccebedb97dc6c0c5b55aebdfa1af412df589c33da8333eb4a0e5a1dbba3a5089619604d8befbf2c45fc82db0a242b452450d2f3c1c815b77a4266923a88211f0913ba87782242b3d5aa1e798944beff6629e648d491d2e6713da716d0623da42d7bad7e17cf7126f9b20816098899b88a334ba1e140b77e3c5dfbdf06e300eb6443e45f0ca5928260bc2bdc64cc7f80561f55f31c06b47bac5f53d1f5c70cd6ec05102ffe3af142dc77ab22ee08214c210152108f95ef7a97f2fe03e8274baa1be74aa5766569173561dcedb24ae53ce1fced9db286035c6b2807a2fde63ab69887618819e3b9c0d7e49278e7831de0da7435d813822922671bc0d2fc018a0f1276606fdfd1cfe76859ad91835b7619c79edca99ef2e2e90c1a6841a42eebb17526ea8af8726437514948497aa0d20edd73dfe2406466c3b7dfaa053d25b702a497b07c004b5efb19ebe2b8de29c58db79add8e97d2f03116b2c64e6c14d19e177393d11c4449161c17b9f24acbd08106a2410401ea0115551b8f3b2525431b0ff432dd24ac5e53b6d27cf56ed9e51250c482680864c7ae356237e2748eade1e980bb1a4121dee64488b40c071c1b0f0526e4cdebe5b619fd227c3d79e07220a1ee54ff9683714760a4bcc355e1bd32d550d598f26ff9e42e2963f1e0b4da8fe5dff3214095ee4b56451fc384b6c2dac6a94629828cf77ac028995be890d54fc438cbab4c975a23c728fca7f2fc6b52534a9a903362176f5f10f47537a896461376bee42e3d6f7bdd6ae39a1fc224316c9ef3812d3d685c3344ad3dfccedf4df9f9083481c157164b4cd87db64e56ec935fb3c697ebcd18c8d859a9e1bbf6a15b7676756b03de4c86c470c1686127b1f7b4a66d544f2f942576347595f0d3679a66efccf4c1174612d7f69a60506a686ce2e8f4a53964d9951c64b77e8ff9ef260b4bfb8b4a179c5953dbc127328e130bcfc990ac13085023eb9e856f45c1498bb2a5fc9c5d0cb0cc063985c51299fd53ed90363f4e02ada55b83c2a655cd2276b9afe13d85f159a05905c8be5f3531af3bd30f27f5119aaaaa16158b918daedfd6d9456374cfd3f26b4a87630adcf65117495a403c12f115c62ce4ce3da686399df010f59d7a4dd13cfda6bf1ce478430013716a329adaa3e50de1815978bdb8ce260c64e7fe4040c5bd94c11aaeb9c12fd21bb6aae3bf320b1ed47f415d6862f3ce939867d235727569dc0457d5bd40381f15684dedeb66ef0614f054139cd7e23e9fdfb98781de6ec0af1568feb1db794930305a85ce26bcdc34bf18530f001c5fe93f03357dc478d542e0441db089039ae2ce7c7c2e4e20a248d5f8d1a5879fa0e5d5f52a2568dcdde9503fc6c7ecccb6a7e69d7261cb5c415eaa092ea9f286cbb4e29da1b87f2151f19b8c681ee6f922b745043326bbd83b79576b411fb16b56143105db55225fb61e31a6a092d5c3a4c42a1a8dccf66fa8c468d62a7ee5a516dfdeb1847295d28982c68c707cd70e36e380ee81a876342ddd5b99acca5736215406587ef120c3")
truncate(&(0x7f0000001180)='./file0\x00', 0x7fff)

[  366.802373] binder: 23505:23510 ioctl 400454cb 0 returned -22
[  366.805227] binder: 23504:23512 unknown command 0
[  366.809117] binder: binder_mmap: 23506 20ffc000-21000000 bad vm_flags failed -1
[  366.820984] binder: 23504:23512 ioctl c0306201 20000240 returned -22
[  366.826199] binder: binder_mmap: 23506 20ffc000-21000000 bad vm_flags failed -1
[  366.843765] binder: 23505:23510 got transaction to invalid handle
07:02:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x801)
r1 = fcntl$getown(r0, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x40)
write$input_event(r2, &(0x7f0000000240)={{0x77359400}, 0x16, 0xffffffffffff8001, 0xe4f}, 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x700, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
syz_open_procfs(r1, &(0x7f0000000000)='net/l2cap\x00')
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="037e06aab47e630840", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="aa9c618681f09617fce22b858b5eca0a6e6cb7652ae2eeff4572ea60ddd7771824114543083455283cb563f56abfb0abe90a80b056667a7fdc"], 0x0, 0x0, 0x0})
r3 = fcntl$dupfd(r1, 0x406, r2)
write$P9_RFLUSH(r3, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000140)={0x8001, {{0xa, 0x4e24, 0x100, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0xf292}}}, 0x88)

[  366.851523] binder: 23505:23510 transaction failed 29201/-22, size 0-0 line 3018
[  366.866211] binder: binder_mmap: 23518 20ffc000-21000000 bad vm_flags failed -1
[  366.888675] binder: undelivered TRANSACTION_ERROR: 29201
07:02:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r3=>0x0)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r3)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:21 executing program 5:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)

07:02:21 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0xc7, 0x0, &(0x7f0000000140)="bd4e0427f067b6b14c14889010bcb6f5c31d95f375a06b482a502a14e0ed9fed39a08da9ac907dc31b7814a1ce65c663fe4d85de264f658e5ecd80b3ca76478aaef98f5df414e60036e08ba01fb28eb916e66e437f5df1cdfb9791d0d6fd3337bb0bf36b94b13756948936cc910df44b91a788050f9428dc994c6d6bbaad5ca1f4c68b8f42d85489893a02b581fba246e31cb562b124aa97a78a11a0bba67c42b4c527f3cd086fabd3843989329435d09311d3a6837909fdebfd1a043527d480fddc359d75dbf4"})
r2 = add_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="dde189998200372d82b3fd1203b24331d16f18232ab7eaec9ba928ecf498fc57c0", 0x21, 0x0)
r3 = add_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0), 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r2, r3)
r4 = accept(r1, &(0x7f0000000340)=@nfc, &(0x7f0000000040)=0x80)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x902, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x2, 0x7, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='nr0\x00')
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/policy\x00', 0x0, 0x0)
r7 = openat(r6, &(0x7f00000005c0)='./file0\x00', 0x4500, 0x19a)
ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000600))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  366.948789] binder: 23528:23538 unknown command -2040423254
[  366.954774] binder: 23528:23538 ioctl c0306201 20000300 returned -22
[  366.963988] binder: 23533:23540 unknown command -1442415101
[  366.970326] binder: 23533:23540 ioctl c0306201 20000240 returned -22
07:02:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x145, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fa2df393", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:21 executing program 5:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000005c0)={@dev, @remote, <r1=>0x0}, &(0x7f0000000600)=0xc)
recvfrom$packet(r0, &(0x7f00000004c0)=""/210, 0xd2, 0x2040, &(0x7f0000000640)={0x11, 0x13, r1, 0x1, 0x2, 0x6, @random="c8b74933fbd7"}, 0x14)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4000000108012, r2, 0x0)

07:02:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x20000000200003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  367.039786] binder: binder_mmap: 23546 20ffc000-21000000 bad vm_flags failed -1
[  367.075353] binder: 23557:23560 ioctl 6611 0 returned -22
[  367.113653] binder: 23557:23560 unknown command -1812779526
[  367.126106] binder: binder_mmap: 23569 20ffc000-21000000 bad vm_flags failed -1
[  367.130282] binder: 23557:23560 ioctl c0306201 20000240 returned -22
[  367.139380] binder: 23553:23559 got transaction to invalid handle
[  367.146437] binder: 23553:23559 transaction failed 29201/-22, size 0-0 line 3018
07:02:22 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=<r0=>0x0)
ioprio_get$pid(0x3, r0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10880, 0x122)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x6, 0x0, 0x80000001, 0x4, 0x4, 0x1})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000380)=<r4=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8)
fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r6}, 0xc)
r7 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x10001, 0x401, 0x6, 0x3, 0x0, 0x2, 0x11, 0x1, 0x8, 0x6, 0x8, 0x9, 0x0, 0x4, 0x6, 0xffffffff80000001, 0x4000000000000000, 0xfa, 0x80, 0x1, 0x7, 0x4, 0x10001, 0x0, 0x80000001, 0x7fff, 0xfffffffffffffff7, 0x7fff, 0x5, 0xfa0f, 0x4, 0x40, 0x0, 0x3, 0x5, 0x0, 0x0, 0x4a2, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x1008, 0xffffffff, 0x2, 0xb, 0x78, 0x80, 0x9}, 0x0, 0x9, 0xffffffffffffff9c, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000002c0)='lo\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xe0000000)
fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@ng={0x4, 0xb, "459b2c135978796a3e56ee908b7c"}, 0x10, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0319f03f38c76dfc4f235c7609601f265cf45486f62a81fa080476d807a283916f3f7baf3a96573dba73d395fc9a9da8e8901451efe1a1fc4e071e0a74ae664223dae4f1847b39c9087cf6497b001ec08a8abc", @ANYRES64=0x0], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x3)

07:02:22 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0x6)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='setgroups\x00')
ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x1ff, 0x1000, 0x10000, 0x20, 0x11, 0x0, 0xffffffffffffffff, 0xb89c, 0x100000000, 0x7})

07:02:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
eventfd2(0x20, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ac41163484023522c0685d766ac7a5a65341b9df602e7ed0d6bf0b8abaf685a653d739b43762cde264da8a4f513be8b90bfd2fd2572c311cfa2532f5d68b4d2ef39be80520a7365afd6d4fd138faa6cd1de356da674ab6c8877e23b614e9b5414b10cb329ad96dff15e7baa13a0c565a8a7bc07d9fe105e04ae367d745a8d613dc12f632d092aedcb783c"], 0x0, 0x0, 0x0})

07:02:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e21, @multicast2}})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  367.157809] binder: binder_mmap: 23566 20ffc000-21000000 bad vm_flags failed -1
[  367.179163] binder: binder_mmap: 23566 20ffc000-21000000 bad vm_flags failed -1
[  367.180711] binder: binder_mmap: 23569 20ffc000-21000000 bad vm_flags failed -1
[  367.204923] binder: undelivered TRANSACTION_ERROR: 29201
[  367.249175] binder: 23582:23589 ioctl 40286608 20000280 returned -22
[  367.257276] binder: binder_mmap: 23583 20ffc000-21000000 bad vm_flags failed -1
[  367.269525] binder: 23586:23591 unknown command 1662108698
[  367.271530] binder: binder_mmap: 23588 20ffc000-21000000 bad vm_flags failed -1
[  367.276775] binder: 23582:23589 unknown command 1072699651
[  367.289783] binder: binder_mmap: 23583 20ffc000-21000000 bad vm_flags failed -1
07:02:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000a8607a65260173bdc855e103ec83539af3e7627a6517fb8bec8e81d7b34a92b12af291c76be7550a501761b6bfe91e816c5239d8f58b3e736e6448dfc12a4ef9dd56f6af1daaf6758e394829e6a35bcd9d30d532572e12e87972fc18a92cc941b412c4e6f95f4487cf02d53575cf14113be565dcf44a786244b873d0fb4c7bdccb0686391c12a17ebfa9eb25c155e800a765b2036a60bdc6abbc85ac7112f40fb8d110c7143b5b8b67623d6ef754fd2832b996bf85fd189262a9a91ab78639a76fb7479f71b0c4"], 0x0, 0x0, 0x0})

07:02:22 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0)
sendfile(r0, r0, 0x0, 0xfff)

[  367.298305] binder: 23586:23591 ioctl c0306201 20000300 returned -22
[  367.305156] binder: 23582:23589 ioctl c0306201 20000240 returned -22
[  367.333020] binder: 23582:23600 ioctl 40286608 20000280 returned -22
[  367.341485] binder: binder_mmap: 23599 20ffc000-21000000 bad vm_flags failed -1
07:02:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='-vboxnet0nodev-\x00', 0x10, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  367.359667] binder: 23582:23589 unknown command 1072699651
[  367.367267] binder: 23582:23589 ioctl c0306201 20000240 returned -22
[  367.384289] binder: binder_mmap: 23604 20ffc000-21000000 bad vm_flags failed -1
07:02:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'hwsim0\x00', 0x3}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000280)="6871c6f57a6477fa8296c64a14619ded0ac5a37607ddf0bbd00059c30a84f9a42ac12801568eb5306ee7df29aef6ad31f7b5aeb1299a57d54b8bd233f018016673d67f3181377468e47854355c7b7d25e611b950f1bb496c1903e13865ebb4cc0b5dfad106999bad5719c6f4bd4030f71d43e8c9c64c229ed0dbd5bc573cf2df04f74b6e6c003e2236c9968838f45aa1", &(0x7f0000000340)=""/183}, 0x18)
write$P9_RMKNOD(r2, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x40, 0x3, 0x1}}, 0x14)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  367.410459] binder: 23605:23612 unknown command 6
[  367.417757] binder: 23605:23612 ioctl c0306201 20000300 returned -22
[  367.438888] binder: binder_mmap: 23614 20ffc000-21000000 bad vm_flags failed -1
[  367.472363] binder: 23617:23622 BC_FREE_BUFFER ud186aaa75f653391 no match
07:02:22 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000002c0)=0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000280))
open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x40)

07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20080, 0x20)
ioctl$RTC_PIE_ON(r1, 0x7005)

07:02:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @rand_addr=0x8dae}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/108}, &(0x7f0000000240)=0x78)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:22 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x2)
sendfile(r0, r0, 0x0, 0x3)

07:02:22 executing program 3:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0xfffffffffffffff8, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff)

07:02:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpgid(0xffffffffffffffff)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x6, 0x4800000000, 0x401, 0x7, 0x0, 0x7, 0x4f07b56fd064e6f0, 0x9, 0x3, 0x8, 0x4, 0x80, 0x80000000, 0x5, 0x2, 0x2a62, 0xffffffff7fffffff, 0x1000, 0x8, 0x0, 0x7fffffff, 0x4, 0x1f, 0x2, 0x5, 0x5, 0x9, 0x4, 0x8001, 0x423, 0x5, 0x40, 0x7ff, 0x6, 0xfffffffffffffffd, 0x9, 0x0, 0x80000000, 0x3, @perf_config_ext={0x3, 0x4c}, 0x8000, 0x63, 0x2f4, 0xf, 0x7, 0x1, 0x1f}, r2, 0x2, r3, 0xb)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  367.575515] binder: 23636:23641 ioctl 8918 20000000 returned -22
[  367.584874] binder: binder_mmap: 23637 20ffc000-21000000 bad vm_flags failed -1
[  367.592064] binder: binder_mmap: 23640 20ffc000-21000000 bad vm_flags failed -1
[  367.602298] binder: binder_mmap: 23637 20ffc000-21000000 bad vm_flags failed -1
[  367.610971] binder: 23636:23641 got transaction to invalid handle
07:02:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))

07:02:22 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0xc0280, 0x0)
sendto$unix(r0, &(0x7f00000000c0)="0ea3a8f48851a30dec8970da1cda8c17a2d6511ab72233425f95db65d99ba35df53521dfdefdd716fd34d9a9f00a3594466d9756d5d8320f595d5666f7394d7adac68919546528eb15144ac5ad24079ff8619851f9cd3c22b858e668a9e8fa7e302375620c97c4ee657fd10d1a230d819e8826fc2aa8887a2ca3e0fc33c9d3679d5fef", 0x83, 0x20000800, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000))

[  367.618624] binder: 23636:23641 transaction failed 29201/-22, size 0-0 line 3018
[  367.624703] binder: 23650:23653 BC_FREE_BUFFER u0000000000000000 no match
07:02:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000003480)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0})
r2 = getpgrp(0x0)
recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000030c0)=""/70, 0x46}], 0x2, &(0x7f0000000340)=""/241, 0xf1}, 0x1f}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/93, 0xfffffffffffffe34}, {&(0x7f0000001540)=""/233, 0xe9}], 0x4, &(0x7f0000001680)=""/207, 0xcf}, 0x5}, {{&(0x7f0000001780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001800)=""/140, 0xffffffffffffffba}, {&(0x7f00000018c0)=""/246, 0xf6}, {&(0x7f00000019c0)=""/139, 0x8b}, {&(0x7f0000001a80)=""/221, 0xdd}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/234, 0xea}, {&(0x7f0000002c80)=""/21, 0x15}, {&(0x7f0000002cc0)=""/154, 0x9a}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/100, 0x64}], 0xa, &(0x7f0000002f00)=""/157, 0x9d}, 0x4a}], 0x3, 0x60, &(0x7f0000003080))
ptrace$pokeuser(0x6, r2, 0x100000000, 0x2)

07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$setsig(r1, 0xa, 0x2c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000380)='net/ipv6_route\x00')
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00')
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48044}, 0x24008000)

[  367.667276] binder: undelivered TRANSACTION_ERROR: 29201
[  367.669412] binder: binder_mmap: 23654 20ffc000-21000000 bad vm_flags failed -1
[  367.718301] binder: 23662:23665 unknown command 3
[  367.728382] binder: binder_mmap: 23661 20ffc000-21000000 bad vm_flags failed -1
[  367.732492] binder: 23662:23665 ioctl c0306201 20000300 returned -22
[  367.739338] binder: binder_mmap: 23654 20ffc000-21000000 bad vm_flags failed -1
[  367.752231] binder: 23668:23672 BC_FREE_BUFFER u0000000000000000 no match
[  367.764110] binder: 23662:23673 unknown command 6
[  367.774187] binder: 23662:23673 ioctl c0306201 20000300 returned -22
07:02:22 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = add_key(&(0x7f0000003280)='id_legacy\x00', &(0x7f00000032c0)={'syz', 0x0}, &(0x7f0000003300)="0934189701db54229176c07f4c1177fb9a2a4f90365972e178cc03bb2ed2d3d3957dcc725b9938820097fcdb04", 0x2d, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000003340)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000002280)="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", 0x1000, r0)
add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="72323404022f86baa90bf631e11d48c0bf096cacc0f90d77b40a0a5ba4f6ea01497399f70a7673702f2a81c271f94b8575b10364bfccdb98b8b5f34e2441cbcc261a39962a389b926308089b08e05b", 0x4f, r1)
add_key(&(0x7f0000001200)='asymmetric\x00', &(0x7f0000001240)={'syz', 0x3}, &(0x7f0000001280)="505e84639561344148be49147aa0d13a66aba2c9e449fef90092a951bc6ee89e67354d37eadfdaae26a60b7e9aef25244672772295674d19e22970ea1dbbec11915d333d7747a5ab65ce1f9a0b4d3ad22eb7cd5c05217d2ec2a8b45b363e307af9cca54ee0f99dca8ae419bd66e6347e93a0f569d9c903ee9f941f401b19c740f97479dad2d26b637e6a0a945f6dd450805b8c6114267cf1fe6e41ccae33d1d6003ca42fd7b611070cc6abb6507a2289bb531e9f933110a2cf4f71a1ce5d393842ff3f5bc40152f268112483af1712569904e022b6b9d8023610a459a28f6f277c360f628b70850b125d26560c0252452100761cdee2baab3ece1ed45ea85c6c3e8bc59cfbd8eccf8eb6daa33d451297f359e6e35bc16eb4cddc034b9e0af8b7b9e48a51a1548cfd141ae6589f58a71923c3652853769306971fc86c7233c8a9c4d977de992593ba9de716f9eb267c7244b2a32ce5ab1195ba8bf6ac57f847d306d709134b9d66a3f1bf89ee05bb3f1792fc7b6506d723b8189982c89323460a3e9bcca7134f8d77b83faaa3c3063f13b40c15830b46cd629c3b7cdc5b68c1ac5a663ad351bdd74f401c482e01317fb2c0648a6f7a63de8a3e6d60be7640e38486bcc0ff33945d3bec7088a5a3d1f63323eb091e903370aee6d9c5cf41eef49f1d591fe21c19a065b4b625e30d42d696c77e17b8282194078fd90979853327a329e7db93fba92c4aa6ca34d6711282ad605bcee6265c77a6ec97b99f641178df9d1acf9038bd08c349ebcba4f9a3de06051e7e326c4244e27e20a8c6cf4c0d96c5b6520135395c2a7b156dd61f76c4c2a745e46312f53147afd9aa5e9d37ebcdd1c916398e1aec595403a0714c2933ae7ea9a0ee5d499666359b11465ded59a74ddf336644e1854a5e23171cb7b8488c7cb5bd620f606870a02829c85fb018d170e8498ccab1f23331bcd6872a953af06327c33ff4ceeb9af8f5777e6d31ab787f66b26b69182d696e582ac7a5aabf77257b2599c83782fdd00cb1a4bf6b12f0a89dc6dbf0fb96ee19f06d253c163f75faa9bb3409990a9fd3f683d316df18d7d36cadee6e3929a1cd3a9059f4a8bce2f648876fc50b4cfb99186b0233ab4bc5ada0b793e8794fe0b8111a69b6766812e37e3c854a10c03ed4ee456d3369cb5b3d15810aa2f14e573fa477b4c922912f963bd231e4f0e49bf899e9cb7f7ce3034e6ce1df3cffc5c0fd897de7a3b0cede26b7ac72fafdcfba36574f3e7b45e0ed9209fb4142e946ab811bf4b09e04077d6bb20887ddd7e81c692690894f80620d66f4945787a21b0657b72215eedc225c8413142f38db47acbf28682d7f726941c76d3b0edd5a71dd5981e37d39ad493d75fbccb9428cd04602f120bdebebb4fe12f22339e956ae3b3d7bb074abfe7fc7fcbd20d222bd5d332a95cdc98dfec399dc357d0cf1e0e84bbb1b2585049692d93b5edc27524dc4670e2ef9069ad82c439fb647bb032347386b22be0fd32adf6fb1b6be47c6582735ba7de05c57ab15856b0361599eeb7574f5f9d153af0a0092d955cda92b37f8de31491efce7f0c5ba1672cfcddb103a8b652c705bde012a445f1c53083cb4a6b157b628e2f91b8f6cf8f548e43002c118a501fc49e25a4ce60b113c678487ccc5cc29e2c3fcac9bcc33bdb43ec039016331d6fdb00013430a524a58a74db9e9cae00216bf4cd9a9f3269b4da34a24359bb05f99b557b320e8eb675b985774c1a6786ac8406b9355961da961109ac8d72f6a190dd876347831b3d054329a52c64e6466430f24c3d0efaf464aea8415f18fef001df75ec8ee27c09f7472dbdc7ae040339a92b6b00f1140eec9453f80b632c038f59eb05a4f52bfc4500ff2862117441cc67d7ae61a870c7892ae435c47412628a21d729620102f27386af3a98a496b79cde832c8e1d4ff87443ce355d8c619c2a312a5a3d3bb039ee195d9270bd4a4d12ea30629c7d7e416af3b828c945ec3721fdf58612e73ea357a93f4f0419506eb6e30b2adb58afb8d1bde59d2df0c6a43ddabe58ddb320806ef982ea5d5fafd1ba27c2de3179177342a94a61279e7545de9b96f1ab7d0abd20d47a019de6bf2ff9e14fa38a0b3f1e6a99e819e1f42c26d1b66457211c04925303fe883e44056fba35c58d941df264828dbd4b5581e06867c32eb47205403c47682c6cbc1b0b7572e9c6ac809b594fbae52cd4dbad46223b1d340ffee840c0ca70bd210c6b823e0f6e18a65586244e2fd3966a0c25e93f491717cf9ad17452c4bb56ca19072d6f3f1301b352ffd45ac33294bdbf4466590fed27ec4a11c32dbae9689a7bde6f412c83debd2e672724a59e5b9206076f662e002cee598788ea35e7594a9c24edba3ce778a6ee79a764c8e197e6a65368fd83e1e3ab3408fdfc936471652b11155893fc49bab48f2a4d8d3caa869303b266d77807e572776aecb3d67494cc4d19e7d3fe3d5ff87b0c6f3b73d4a6131846cef49806f471eacc52d4e2d264d64eb6ba5311713e03f447efd63f179eae6161753aba3709ce493297eef7594be7f38201c46c80b953b46ef5067c0a7fb667210500c86508ab0f51cef9306c68ef4323f2a641c6795960b2d6e1c42d3a93f31d231b86c1502970b339814978b2cef26c5d604b6344ce95c5e8f17cfca5d307f73f4eb50f80a5cf09cba1f0e06c6bc357aff23b5828dd5e10afb20ee1640da7d1eeab079973a24a537c25a4b6bda38a593bddf5be8e96da4f12051a1d2dcebe8777ec1410eaa7f16c1afb781c209b3d0b05dc070e71c873f1623061a9dee18cad3f89ce5686f664c91866dadf2b43dd40c55117da9462f0c8c5e07bff4ddab8743be5c9844037271e54187ab2e8bf73870db1ffb2d24d11a39e00ca7000659cf2e495017a5ef12484a6d9691964ee4e432b9d0d986872d5cc7541295870ea6d4960ad6b5e3c365e719fd9807d986665972af6507bef03ea2dcc68e15a5e6d1b6a05a91a98f7856df315ead05c5b8e9962c758e114656e1bd545b74e94de44bf5ad4108effe55a1ed20d412dd9a8c0ee7d7a291551802bff1ec4b0dec5cc09a1f592bd263b57112e2edb207f2ffddf9fe5d14cb3bdeef9c688734fcc1ec2d39cb9a242e5b559501b2d03cd6be42634ec2dc68aedd773ea8c5c2f4d8025db7501861ae2f3e358839b91ac5ba90c15ad50ddc9c3587b74ee1d996eb6b27cd522a3437ed58e06341bebdafead49c69b62c862b1235e7072b9ee9be745a051593c28710aef959af6eb4b0e4702822f9b218af586e0decc2eee1b7201e373efac7890b52a93a4f30aefedc2705bc5be24bdf4451d6edabb56a742bdbd03ae2690b0ad248bb2fd44fdd9c03cf2af3b46309d13d5cd171a48acebdd4dc944f26f0accf00ead819fead2ae90b3b43d109a8cd1c6b11f30a1484399b903e8894b9d800ff1f38e428e1e0c9f7dce18051d37b50f3d949bd483af94b7c40510af4db9c3e0fcb2f1681e03d76fbcf019ccc87eedb54ffa19edb63a83ef25f41e70ba01c72e2c2b6c7b8a7e7d32f4480e203dfc81aecca178463b2cc0b6943b53bb4d1d09bd8f3f78d15cdc1dcf4189bf136d60205f8bef1164840c9d0e5afde018ba678549ea305ec53449286425f9875f61d0ec96472e4d11fe17636adcbd4ea8ac511127ceca7f554765b293a733d8ecb2af2389c96606326e3955fba8a3a2ec4b0398dd32202ae6e32af27dc596c627b696d60447aad67b75df920f8d5e4dcd2f4bbbdd90086ade817949c1707417226e575d49001babab1a086db87b1604ed958184ea1b375e8a9eed8e920b48dd6906d3f3e5971ce9eece7d11e6bd3a26f95f6ba4c069333db67d8b24f2aad9efe0fb99485d53b41bd27c8361f334f2b7686196b39d10141aa8dd9b8492c133454c4a52d2b5aba64471cd1a9a6c51b908dce5fa0633945f6eae81823deed57f6bd2db3aeca9a3608c3c8f3bd5e457c4d97b223043bd192e21f729ed6cb82b6ebb4bfce0ac7177b0cb4c9ca823a4b0554717754d45fe1c52113105469aff0c7918f7a4b20e61f5988dd7c0bc43d02d15ea8b6997c1d6cd383b8448a25541c6a750eca2e666614fe353895755e4d119acec66791fc30e75429a7c166cbadd1dc460dffcca6d36c316e9499aa057653372679b121adfee0e3aaf40ae24e84b7aeb71caabba4f793f38963935e584c15fb85c8b8f9794a11a22dfe723bc56e223bfe9624f8008b896365a580f1a66f230642ed2500666386bf135bbcd4f3202b6f92fc7f2ee688a5e3f44bbf121354da6a9bc80e9da62c4a939e8c28fd9ba182a69be16149af933c83033f24e2639f1e3e61ea99c9f2bd95c94c8aa4066ab82e4718191fa0ff593b7330be831adcc92bc49ef754dc41ec89cd42c55bb19eb17fcbe75750406ec029f94a84c5dc5fd3f3a60246604ae7f8da17e69daa3ee8b9559ec2957fb89f75db5deaccf90e5b0b03fb6b01b54382050a19ea887c28fca0ada910c4e4765b61a2cb254888379d7879a6c6d0d210de23bf1326c20af5d340e991c6f2a3a45949944046d1d79f41090ff1dd7bcde348781a96a2f896438535a6815e00312659bdc5be09e45b6c5bbd440618d08bdfb6d98c0f104dbc148ebe77657968d39ad5f664407ac5fb43b07ad28bbd6b55977d883c1bcb9d3998fc340968402b364ddc009d18318b74fa1b0774251531d71b95b627705e6a17d6318e4dbd3d71a42d4fc7f9d7877452da269d0859bd9f338bdad05a7c1ebe983c6409dc5f19639c81079ba7ed155f97055763cd0f58b5b7f1a3a80620e4329de9bb4d2ae96430f90f14812fe2dbaf91679c2d35a23575b884f47007be7d5c6ad0d9dec1efaf2bcfbf0a9a8016ceb453ff6247a5011a8819b8d53d26c3df359df1e68e400a35401bf3f7fe7c47f0a3cecf32d61147397c8c20c1c61c18f98b5bfcf35e7385ffa8a9344a5d764fce386ef49197cf7548c6922e564112ee65cb4b271a2d998a14179d32b3220afba3a9f8c28ae2f69dde2a898099b5d90f3484a749c8672889a86727fa8f117cc67e5ffb92e511308e30f925b098eda2cb16a4c639683d4273bb3a2ad7a61f198d16df5bbe4655948fab63710a90d6870d32444845fb510c9b563cce1a137fb34fc8ddd0ab903e737828270043ad522f467a3d5c32a6da0969f0b9ff6785e02b096009140188da8b8cd4fdfaecccaa4b7b6d7fb6fb20ca744ebc5516b7dd2fe4377c0177479904a25fe7030710ac9367c3db2966f1b0e1138d596bc88779ff367048a512fcc5d9344350958b03ecd11663e59be1b7888874d4ddb8342c959d2407e4f399b708f759df86b5eb2c39547761d84b606b953e40e03a2c3cee8ff90d3837ee03e9a093d35f5ae7287c55723531beae9fcc037373bc9082cee3ca2ef620e00c24e853d7580605754b7072a9a71ebf14a281c78c938e8f62207f6d5dabacb0721022f6ac445a444619e0b1332e2adbd3f3ea7cbdbb0ef87ffe4701f51601d22e88f8bfceddca06abd44ba2509a7eec0276cde099a6b4a45e75dc434b6a60d1ee3878391aff1f9ac8d5951ead518a7477e0468fd697c9fe782b4ab3c682d3f0bf5adc99282431edefe0f08837ab02f6143ddb507664bcc283850fac53817c22722ebd557ef06c43105d6c2f80201ba3e68ecd49f0c398734aa4a0851bb3f21376027ee5bd2aaa4a953c299c9c5ba2644fc37395c9e7080a5674f6c6ba6b45162b4ac2b33b3f5b6853e4122bb6bdec6ed4e0e977e19e08a076da1f7bd2ba26d58c7dd2a214bbac", 0x1000, r1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000200)=""/4096)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x441, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x27, 0x18, 0x0, 0x9, 0x6, 0x8, 0x0, 0xa}})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xfffffffffffffff8, 0x4)
r1 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x663, 0x80000001, 0x5, 0x0, 0x3, 0x2000, 0x8, 0x8, 0x2, 0x2, 0x4, 0x2, 0x1f, 0x873, 0x40, 0x9, 0x7fffffff, 0x10001, 0x0, 0x50, 0x61, 0x7fff, 0x9, 0x1, 0x20, 0x8000, 0x8, 0x81, 0x8, 0x238, 0x7, 0x2980000000000000, 0xffffffff, 0x5, 0x8, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x8, 0x6}, 0x22040, 0x2, 0x9, 0x5, 0x3ff, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)=0xb0b)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0xfffffffffffffffd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x8}, 0x28, 0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r2, 0x0)

07:02:22 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$RTC_VL_CLR(r0, 0x7014)
sendfile(r0, r0, 0x0, 0x3)
write$binfmt_aout(r0, &(0x7f00000000c0)={{0x1cf, 0x3ff, 0x8, 0xe7, 0x29b, 0x7fff, 0x150, 0x7}, "249751f4b7b62ef62700d97862640c0fb4fb43ca560487e25921b9f919357e64d3b72b313e7047d1368e4bda8c4aaa008c2cb4da7cdf09f481f4f29a1d3d9e975a9bc69dfe83232f6f53df8b05b197c60b3dea88955dc474ac272bc7d0d91e8b373e6a4fdf6b2f16e4603a33f47e39b872c83f0e6cae76a59ca2c3179e33765ebeb1b63e633bab4f359e57b0221aa2729855211b27820891a5ca5123d679e0", [[], [], [], [], [], []]}, 0x6bf)

07:02:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='[}\xda}eth1nodev\x00')

07:02:22 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x20000, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000000c0)=',\x00', 0x2, 0x1)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080))
r3 = gettid()
ptrace$poke(0x4, r3, &(0x7f00000000c0), 0xe0)

[  367.875326] binder: binder_mmap: 23690 20ffc000-21000000 bad vm_flags failed -1
[  367.875773] binder: 23691:23697 got transaction to invalid handle
[  367.890774] binder: 23693:23698 BC_FREE_BUFFER u0000000000000000 no match
[  367.898143] binder: binder_mmap: 23692 20ffc000-21000000 bad vm_flags failed -1
[  367.903395] binder: 23691:23697 transaction failed 29201/-22, size 0-0 line 3018
07:02:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x4)
openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0)
readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000)

07:02:22 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x100000020000004)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x2, 0x4)
sendfile(r0, r0, 0x0, 0x3)

07:02:22 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  367.941289] binder: undelivered TRANSACTION_ERROR: 29201
[  367.979123] binder: binder_mmap: 23709 20ffc000-21000000 bad vm_flags failed -1
07:02:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000000000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = dup3(r0, r0, 0x80000)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x6, 0x6, 0xd, 0x9, 0x4, 0x3, 0x9, 0x2, 0x7, 0x6, 0x9619713, 0x7ff})
syz_extract_tcp_res(&(0x7f00000000c0), 0xa, 0x205)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x400, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x57e, 0x4)
connect(r3, &(0x7f00000002c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000d7, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84081, 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)

[  367.998134] binder: 23713:23720 BC_FREE_BUFFER u0000000000000000 no match
[  368.004433] binder: 23715:23721 ioctl 400c6615 20000140 returned -22
[  368.017482] binder: 23715:23721 unknown command 0
[  368.023295] binder: 23715:23721 ioctl c0306201 20000300 returned -22
[  368.023481] binder: binder_mmap: 23719 20ffc000-21000000 bad vm_flags failed -1
07:02:23 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x480000, 0x100)
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

07:02:23 executing program 3:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x480, 0x0)
ioctl$KDENABIO(r0, 0x4b36)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x5, 0x3, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="85d9662855242b9213afd5bb36d20a50790dc0db33a305875cf5fabca7effcc8bc15ec207dd1057a673fc8675f5f3d96a6724f0129ccaf0a7aa6ff12e91547e7cfd5913b7755a97f136aebbb8a93689a7876450a3f0f9d0b5d532c895d75321d"], 0x0, 0x0, 0x0})

07:02:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r2 = dup3(r0, r0, 0x80000)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6e7c01e534545ceb617400000000000000000000000000000000000000000000000000000000001b0000000500000030040000c8020000c80200000000000019010000c80200009803000098030000980300009803000098", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x490)
ioctl$TIOCSCTTY(r2, 0x540e, 0x9)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x3ff, 0x2, 0x20000000000000}})

07:02:23 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
read(r2, 0x0, 0x1d8)
exit(0x4002)
sendfile(r0, r0, 0x0, 0x3)

[  368.081351] binder: binder_mmap: 23728 20ffc000-21000000 bad vm_flags failed -1
07:02:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000a33bdec363cc07d18cb068154270cab28ada241945b15efcab4c0979efd0701459d4c777282f12021bfa57335e74f3f9a486da4f4d5182bf3c4a6db1aed88f2b74f4235f3606b0adef063e15dff19bf7ccc1f44b08f091e54df5a1711e2c44c676f1bfc6643a9ab0b7b8e0609dff9bafd13681c1a750015ecc4cf0dc368b680300000000000100eae2037ec6c268a16fab27a73c7f29a5307b8616d0e2047188466da8ea8f2f703f9f65a236f07a8e40a4e3cdb4001af951c66e8c961fd279263ab94df7"], 0x0, 0x0, 0x0})

07:02:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=""/133, 0x85)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000140)=0x1e)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
ioctl$KDMKTONE(r2, 0x4b30, 0x401)

07:02:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = dup3(r0, r0, 0x80000)
ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000100))
keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/18, 0x12)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)

[  368.168911] binder: 23743:23753 ioctl c0185879 20000000 returned -22
[  368.169508] binder: binder_mmap: 23746 20ffc000-21000000 bad vm_flags failed -1
[  368.177662] binder: 23743:23753 BC_FREE_BUFFER u0000000000000000 no match
[  368.190646] binder: 23745:23755 unknown command 677828997
[  368.196887] binder: 23745:23755 ioctl c0306201 20000300 returned -22
07:02:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000380)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
sched_getaffinity(r3, 0x8, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="026321c0", @ANYRES64=0x0], 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'veth0_to_bond\x00', 0x7c8be003})
sendto$unix(r1, &(0x7f0000000280)="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", 0xfc, 0x80, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

07:02:23 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x900, 0x0)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180))
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)={0x3, 0x63, "ce7643f3f2c16ce6d79a38b1e2297d4c9d9aab3ddd3433bcde80d230f9717933e4079e9c4943f2dfb6e109785e3b9e1c5a4f69fe4de4ccdcbcc596a32505d8602088630ea2c0fdec42363b51046afc19e6e4d74ba77f014436bc8edcd5d1500e9a6a72"})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
r3 = getpid()
r4 = syz_open_procfs(r3, &(0x7f0000000240)='\xf3maps\x00')
exit(0x1)
fchown(r4, r1, r2)
fdatasync(r4)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0)
sendfile(r4, r4, 0x0, 0x3)
write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="840000007d010000006300030003000000400100000005000000000000000000000003000000050000e609000000000000000c002f6465762f75696e70757400080073656375726974790a002c7d656d316e6f646576120076626f786e657430766d6e6574312d656d310c002f6465882f75696e70757400", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1], 0x84)

[  368.270749] binder: 23760:23766 unknown command 0
[  368.282789] binder: 23762:23767 BC_FREE_BUFFER u0000000000000000 no match
[  368.285921] binder: 23760:23766 ioctl c0306201 20000300 returned -22
[  368.298424] binder: binder_mmap: 23765 20ffc000-21000000 bad vm_flags failed -1
07:02:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0)
sendto$inet(r1, &(0x7f0000000140)="e0ad58c2e139fdfe4f167574b422f5a637fe21b748b7dfde7d626b336aea5b3ee851a89f7cfde75dc16fef3dcce4e5d2dea4a8c8f750ddad926a57ae6bac6c115270e632437d5aec33e4558784bd2426a248bc099c51ec48683ad39614d8acd5ac90af3e0d570d22500083ef69ec7e4c468584b10653f75c9b85afed7e119aed4c16a3bb00c209e951a6ec187a7456feab1789354fe84e32a1e205fb0b8e5a9cda3de87376e0e3686a935f69974b9b0b9db769831b9fba7bbbb93cfb81cd411bcf1b0ed2e33110d2943c5447a5ce790897c8b91058", 0xd5, 0x20000000, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4)

[  368.338711] binder: binder_mmap: 23765 20ffc000-21000000 bad vm_flags failed -1
[  368.375661] binder: 23770:23776 unknown command -1071553790
[  368.377681] binder: 23775:23779 got transaction to invalid handle
[  368.391675] binder: 23775:23779 transaction failed 29201/-22, size 0-0 line 3018
[  368.392701] binder: 23770:23776 ioctl c0306201 20000240 returned -22
[  368.451383] binder: undelivered TRANSACTION_ERROR: 29201
07:02:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000000000000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r1 = dup3(r0, r0, 0x80000)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x6, 0x6, 0xd, 0x9, 0x4, 0x3, 0x9, 0x2, 0x7, 0x6, 0x9619713, 0x7ff})
syz_extract_tcp_res(&(0x7f00000000c0), 0xa, 0x205)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x400, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x57e, 0x4)
connect(r3, &(0x7f00000002c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000d7, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84081, 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)

07:02:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r0, r2, r3)
fgetxattr(r1, &(0x7f0000000200)=@known='trusted.overlay.redirect\x00', &(0x7f0000000240)=""/227, 0xe3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file1\x00', 0x8, 0x0)
get_thread_area(&(0x7f0000000340)={0x2, 0x20001000, 0x1000, 0x400, 0x3f, 0x0, 0x9, 0x2a02a3f4, 0x5, 0x4})

07:02:23 executing program 4:
clone(0x2122005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="f58ec9a79d9d04873a63e6e88414a042b1c8d7096c4674491ccd23288145d7f605d412ac5c5c92905b9c5e52f50f642f7c0cf4be92aa1c007811bbd20dcbc106bcb8c51e36a90ed4", 0x48}], 0x1)
sendfile(r0, r0, 0x0, 0x3)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$P9_RGETATTR(r0, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0x3, {0x80, 0x1, 0x4}, 0x108, r1, r2, 0xcca, 0x9, 0x7, 0xd4, 0x0, 0x100, 0x5, 0x8, 0x2, 0x1, 0x200, 0x5, 0xffffffffffffdfe1, 0x7c, 0x7fff}}, 0xa0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000380)={'icmp6\x00'}, &(0x7f00000003c0)=0x1e)

07:02:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup3(r0, r0, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d27072a1", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="9eaeb30e9de289136aa90effffffffffff"], 0x0, 0x0, 0x0})

07:02:23 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

[  368.651265] binder: 23795:23802 unknown command -1586335534
[  368.655952] binder: binder_mmap: 23798 20ffc000-21000000 bad vm_flags failed -1
[  368.658094] binder: 23799:23804 unknown command 246656670
[  368.671249] binder: 23795:23802 ioctl c0306201 20000240 returned -22
[  368.680294] binder: binder_mmap: 23796 20ffc000-21000000 bad vm_flags failed -1
[  368.687936] binder: 23799:23804 ioctl c0306201 20000300 returned -22
07:02:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = accept(r1, &(0x7f0000000080)=@ipx, &(0x7f0000000140)=0x80)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x23c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76b09560}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdbcd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3670}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1b8}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x761d}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x200000, 0x0)

07:02:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000200)=<r1=>0x0)
ptrace$getenv(0x4201, r1, 0x6, &(0x7f0000000240))
r2 = dup2(r0, r0)
setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/3)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6bd)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x1ff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
rt_sigpending(&(0x7f0000000140), 0x8)
accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000)
open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000001c0))

07:02:23 executing program 4:
clone(0x4000c000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
prctl$PR_GET_KEEPCAPS(0x7)
exit(0x6)
write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/252, 0xfc, 0x8f21, 0x4, 0x0, 0x1, 0x800}, 0x120)
fcntl$getown(r0, 0x9)
sendfile(r0, r0, 0x0, 0x3)

[  368.706702] binder: binder_mmap: 23796 20ffc000-21000000 bad vm_flags failed -1
[  368.740827] binder: 23812:23819 ioctl 81007702 200000c0 returned -22
07:02:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x23d5bb0e24ed260d})
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x41)
write$uinput_user_dev(r4, &(0x7f0000000140)={'syz1\x00', {0x9, 0x2, 0x7, 0x10000}, 0x57, [0x5, 0x7a6ba63e, 0x9, 0x2, 0x4, 0x0, 0xffffffffffffff80, 0x7, 0x3ff, 0x80000000, 0x3ef, 0xfffffffffffffff9, 0x7, 0x7, 0xfffffffffffffffc, 0x3da6, 0x8000, 0x5, 0x0, 0x1, 0x4, 0xffffffffffffd8fa, 0x7f, 0x5, 0x2, 0x800, 0x3, 0x1, 0x0, 0x1, 0x7ff, 0xffffffff, 0xdcf, 0xce, 0x6, 0x7, 0x0, 0x8, 0x1, 0x80000001, 0x2, 0x5, 0x3a0d, 0x4d, 0x1f, 0x6, 0x1, 0x2a, 0x0, 0x1, 0x10001, 0x7, 0x7f, 0x5, 0x3ff, 0x1000, 0x0, 0x9, 0x601, 0x7, 0x7, 0x3, 0x400, 0x6d64], [0x3, 0x8, 0xc5b7, 0x4, 0x5, 0x7, 0x1, 0x0, 0x4, 0xfc3, 0x2, 0x5, 0x9, 0x401, 0x755, 0x5, 0x14, 0x100000001, 0x8f8, 0x6, 0x80, 0x9, 0x0, 0x7, 0x3cca, 0x0, 0x1, 0x80000000, 0x0, 0x3, 0x3, 0xffffffffffffffe1, 0x0, 0x5, 0x8, 0x8, 0x2, 0x0, 0x10000, 0x0, 0x82b, 0x1, 0x6, 0x6, 0x5, 0x8, 0x80000001, 0x8, 0x1000, 0x8, 0x1, 0x3, 0x40, 0x0, 0x2, 0x401, 0x9, 0x10001, 0x1, 0x1ff00000, 0x80, 0x9, 0xffffffffffffff80, 0x80000000], [0x69223ac7, 0x9, 0x0, 0x0, 0x3, 0x5, 0x6, 0x2, 0x7, 0x1c, 0x1, 0x200, 0x7, 0x7, 0x587f, 0x8, 0x5, 0x2, 0x43d, 0x3ff, 0x7c, 0x0, 0x10000, 0x259c, 0x3, 0x0, 0x3, 0x8, 0x400, 0x8, 0x4, 0x8, 0x0, 0x5, 0x100000001, 0x6, 0x9, 0x1cd000000000, 0x5, 0x0, 0x2, 0x19d, 0x0, 0x7, 0x101, 0x3, 0x3, 0x1ff, 0x6, 0x80000000, 0x0, 0x9, 0x80, 0x9, 0x7fff, 0x0, 0x4, 0x40, 0xffffffffffffff00, 0x9, 0x4, 0xffffffffffffffc1, 0x1ff, 0x3], [0x3, 0x1a, 0x2, 0xfffffffffffffffa, 0x9ced, 0x0, 0xf6, 0x8001, 0x0, 0x1000, 0x0, 0xe5f, 0x3, 0x8001, 0x1000, 0x0, 0x10001, 0x8f, 0x100000000, 0x1, 0xfffffffffffffff8, 0x0, 0x9d, 0xffffffffffffffff, 0x8001, 0xc9, 0x8000, 0x7fff, 0x1, 0x3fdbd10e, 0x401, 0x1f, 0x547b8fa6, 0x9, 0x74a, 0x5, 0x4, 0x3f, 0x1d58, 0x3f, 0x2, 0x9, 0x9, 0x80000000, 0xfd, 0x89e9, 0x6, 0x1, 0x20, 0xa82, 0x9, 0x7ff, 0x9, 0x6, 0x5, 0x401, 0x3, 0x9, 0x4, 0x4, 0x200, 0x639f, 0x38, 0x1]}, 0x45c)
fallocate(r1, 0x8, 0x0, 0x1)
write$evdev(r4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000005c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x8}, 0xc)
ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xc)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x100012, r0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000640)={0x0, 0x70, 0x10001, 0x368a0aa9, 0x8, 0x20, 0x0, 0x7, 0x0, 0x8, 0x3, 0xc948, 0x20000, 0x1, 0x5, 0x3, 0x5e, 0x6, 0x80, 0x5, 0x9a, 0x0, 0x7410be61, 0x9, 0x1, 0x40, 0x0, 0x1f, 0x3, 0x3af, 0xb60, 0x20, 0x4, 0x3, 0x7f, 0x5, 0x1, 0x4, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000600), 0x2}, 0x800, 0x400, 0x3dc, 0xe, 0x29b, 0x1f, 0xffffffffffffb524})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7)

[  368.751427] binder: 23811:23813 BC_FREE_BUFFER u0000000000000000 no match
07:02:23 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09262f29037d5f382587413c7882534916bd051523d5c432a1a930368bc07f801d3e43f646167a25b13a847355415262537c2ed4b3c464380b087db32f81b4dd2eec548fb30647864981fff00a22c58d98f0d744270f78c25f41633304a7b09135abb49389daf804c61ad232b1a21f3844d8cb6bbaacdc36998d0f0e79ecbe648e7912bd5d9d5dce29a2fbcf171a82a2cdef51ee91f60d7b01657a8c5e55890a6b1bd30b604bd102cf4a869a14a7ef9978fe2d379877103d689ed8d6963ec68299187848de80", @ANYRES64=0x0], 0x0, 0x0, 0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000000)='md5sum,!*\x00', <r1=>0x0}, 0x30)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10)
getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=r1, 0x4)

[  368.790644] binder: 23812:23824 ioctl 4c09 6bd returned -22
[  368.818289] binder: 23812:23819 ioctl 5441 1ff returned -22
[  368.827641] binder: 23812:23819 ioctl 127a 200001c0 returned -22
07:02:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xcd5}, @window={0x3, 0x0, 0x65f1}, @timestamp], 0x3)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0xfb, {{0xa, 0x4e23, 0x7f, @mcast1, 0x80000000}}}, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f0000000000)=0xfffffffffffffff9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000008af39b1a832fb0f51830e62bc88391f6b68114271a877a7c64ab0ba1d76b3a8f37565b06ec85a58c986965aff0c48f1fb0364585dd96d7cdc803e6c124c53862f4ddd5eaa349830b09275a9e6539804dd5a2db6b60759394a8b6eff2fb6fc61773de67867aaff4e6919e4dabb871aa37736778f12b4312acd348f9d01724c9851d985e8d805beddc405842f955"], 0x154, 0x0, 0x0})
tee(r0, 0xffffffffffffffff, 0x5306, 0x9)

[  368.831468] binder: binder_mmap: 23823 20ffc000-21000000 bad vm_flags failed -1
[  368.907351] binder: 23834:23837 unknown command 0
[  368.912894] binder: 23834:23837 ioctl c0306201 20000300 returned -22
[  368.931756] binder: 23834:23839 unknown command 0
[  368.944247] binder: 23834:23839 ioctl c0306201 20000300 returned -22
07:02:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="118dd9c308d813d648244422f911734840aa22a3431f5c6c19ad58d13e73a9754b020398d284fec0ff1cace8b962cb322d5bc5217c0f44c3101a5eb50a950381eb1d39b783e0dd711d4f08f7d6192d6a77f3985f42bdb7b96a3dd25d75807c6036b5c2a2a9e66ace49b1843a5fad01a9ec3c49d38ea8f21ad36ea1d1673567c450"], 0x0, 0x0, 0x0})

07:02:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x88, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x97}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x20030, r0, 0x0)

07:02:24 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40200, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040))

07:02:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
fcntl$getown(r1, 0x9)

07:02:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0x4}, @register_looper, @increfs_done={0x40106308, r1, 0x3}], 0xd2, 0x0, &(0x7f00000000c0)="4db127e8263617162a7f7bd493109973625c68056c2430d981c554a9d61a8eaacce6b07c45b2d5b6df4ee3f4b14b40ad302bc1200117a05eb5b96429e2f87c4ae718f36df2902c3e102e788e9af2f4d417f2058c6fd34686f067c1b00548ba09a903490b3e6713d8695fde6ca7454bff7c22095db2c9a2c3b56e293b6759c06f6132dd60e47457e353b8b3b0df0461103864dddfd234a5a2ecbf4f5889338360720cc27a160a665e71d83026bdefb7c6875bdf53dab542942da5c0117a6a298e9aecd463a0c3006254150a484270267ab223"})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  369.161911] binder: 23851:23855 got transaction to invalid handle
[  369.172747] binder: 23851:23855 transaction failed 29201/-22, size 0-0 line 3018
[  369.182273] binder: 23849:23853 BC_FREE_BUFFER u0000000000000000 no match
[  369.202179] binder: 23854:23858 unknown command -1009152751
07:02:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163a16c95c0ddded709ad196b43e750285c9c587d0c4d567d791b8f147856ad69ff00e3eb243c0f18dcce96fd382aeb4f0c85d2017b1c05a8ba420000500000000000"], 0x0, 0x0, 0x0})

07:02:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  369.202623] binder: 23859:23861 BC_DEAD_BINDER_DONE 0000000000000004 not found
[  369.211098] binder: undelivered TRANSACTION_ERROR: 29201
[  369.221197] binder: 23859:23861 ERROR: BC_REGISTER_LOOPER called without request
[  369.224725] binder: 23854:23858 ioctl c0306201 20000300 returned -22
[  369.236403] binder: 23859:23861 BC_INCREFS_DONE u0000000000000000 no match
[  369.267922] binder: binder_mmap: 23859 20ffc000-21000000 bad vm_flags failed -1
[  369.278961] binder: 23862:23867 unknown command 1822515985
[  369.286283] binder: 23862:23867 ioctl c0306201 20000300 returned -22
[  369.302019] binder: 23866:23868 ioctl 8912 400200 returned -22
[  369.310602] binder: 23866:23868 BC_FREE_BUFFER u0000000000000000 no match
[  369.338634] binder: 23866:23868 ioctl 8912 400200 returned -22
[  369.338641] binder: 23866:23882 BC_FREE_BUFFER u0000000000000000 no match
07:02:24 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r2, r2, 0x0, 0xad)

07:02:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setgid(r1)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x201, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x31}}]}]}, 0x34}}, 0x80)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x39ea19ad}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

07:02:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x9261, 0x3ff, 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:24 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/128, 0x80)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x100)

07:02:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
r4 = fcntl$dupfd(r1, 0x406, r0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="935bfa9c", @ANYRES64=0x0], 0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)

07:02:24 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x7)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x7, 0x3, 0xa, 0x8, 0xdd, "1e15246e9f64a408ea97441a82734eeb59d5dee7ae1c928107e129f20ae803040e9e523b649e626bc76b2f6da545a29ab6427114673c3250cc7acc23a2c9ac6618285eb99c9f4d87ba062d9d0e042fb5f9c1a9404d98fa7a86fd3beff8fcc3186c00dd6130572496dd29dfba10947334c7875458a0d476d90a6dda66e6658f87671cb8542d690a504f112257e8285f239b61b272165b161c7bd3da28f9dd35cc4932351dcfb0b9e847855eba7dba8d98245502edc7804f712a80111879b7261fa9780336b21083df4af4a2aa346211b39914ea02cd61dc35bf08bf7f27"}, 0xe7, 0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={<r2=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)

[  369.874095] binder: 23888:23894 got transaction to invalid handle
[  369.880939] binder: 23888:23894 transaction failed 29201/-22, size 0-0 line 3018
[  369.895343] binder: 23893:23899 unknown command -1661314157
[  369.905978] binder: 23893:23899 ioctl c0306201 20000240 returned -22
[  369.914415] binder: undelivered TRANSACTION_ERROR: 29201
07:02:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0)='IPVS\x00')
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0))
time(&(0x7f0000005700))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4)
bind$inet(r1, &(0x7f00000052c0)={0x2, 0x4e20, @multicast1}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000004dc0), &(0x7f0000000bc0)=0xffffff7f)
mlockall(0x2000000007)
clone(0x20000000, 0x0, 0xfffffffffffffffe, &(0x7f0000005680), 0xffffffffffffffff)
r2 = add_key(&(0x7f00000053c0)='asymmetric\x00', &(0x7f0000005400)={'syz', 0x0}, &(0x7f0000005440)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6827a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff)
keyctl$clear(0x7, r2)
r3 = open(0x0, 0x2, 0x40)
exit(0x7fffffffbffffffd)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000d40)=""/219, 0xdb}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x8b}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x2}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x946}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003700)=""/173, 0xad}], 0x1, 0x0, 0x0, 0x4}, 0x8}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {&(0x7f00000038c0)=""/174, 0xae}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {0x0}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x9, 0x2, &(0x7f0000005100)={0x0, 0x989680})
syz_genetlink_get_family_id$ipvs(&(0x7f0000005200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000005240)={&(0x7f0000005740)=ANY=[@ANYBLOB="02042dbd7000fc000c000200080002004e200015080004005f00000014000103f5ff05000000000008000900770400003000030414000600005a45efe7a1e284b20000000000ffffffffffff08000500ac1414bb0801080600000000080007004e2100005d000407fd844378fd536307379e023b0057cc8d237c282918bf40128fc86d3b9ac482627a4173f3d26080b3c8d5c5f058f4e5f45104622f62cc1af932e0528eb34a90a84ac1c603a85d273d347ff41a975e64c21e090000001596b3a3b5cf68f308b7a38dd4b1daf82a3b87278b21c0492bed58e01e7d47830500004ca3b4c5fae463800000004f469722e95dada1f361a949d0ee460e313674d47002cbb54db21b00a4974fb622698c2fc2596bdaa96040ca178df4d5757fb1257c3001000000000000002ca33d107e770f50c11f8938e560522aa795b7c84cf2de19d16e42046de61e3775326e9ab668ac894a6598cd1b85c9e18cef07fd016f12c89e37719a5b39777f18a1634fa8772cea025e11d36fda12a3359a014e784ef0a0ca7c41feb23ac0926b953c9a4f9a7f77e64e49b083559a2e4f7014d036968a351fb5f8c3abb2c251422c041c55333c62f53c4517256642e0c60a2f21a9da44ed8cace4340b64894d541b108defbc81d515bf9f417442683e97fc0a64d7000000000000000000783695a65014ce70ab00d33c3bc41da330dd6ca02515c46cef2992460034dd006bd9644887e56e029f1a795bcb81efef6a1adec444e5e3a33731c23879b51086eadaf0b2e44289002d65530e560e33bf80edc8223c19823d1a977f6c314e77674c572a49e84593cc9208920e26a9d8e1d559e022d012f47c3522992707b492e2a798bb6f2e17e68c06e83756d9ab65337cf63ee6d8360000000000d91cc203d787044ad65657dcf8c62d0219818d11d9039fd3b71306bee38571aded2c6c474b86ae937c8f908a294faa4fec940e9e7698860af461aeb703f1f8495f810cb3a5cda083f6d46bc4009211baf579d3245da73e58a66d221fa742921d833eb15f7d76d32abf64c2c923c98eb5dd8465643fe1d65fe181fb7aa594c1e70a7d63f54bbd7f5d823f13694a8171f6246e6a9431dc3718018b5dde64eb7b5e3bb3ed32a7573de1785174e118189973683953a73ecfebb98e309a8a2b4ea9538f71f0a7fe1178769696054a523e502566cbe14c41fcca959a459f6afc344760be43e854ff4e9fefc4"], 0x1}}, 0x4000841)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x1)
accept4$inet(r4, &(0x7f0000005180), &(0x7f0000000100)=0x10, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
fchmod(r3, 0x8)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000055c0), &(0x7f0000005300)=0x40)
connect$inet(r1, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000005380)='team\x00')
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000054c0)={'bond_slave_0\x00'})
getpeername(r4, &(0x7f0000005500)=@xdp, &(0x7f0000005340)=0x80)
accept$packet(r4, &(0x7f0000005b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x1f)

[  369.975021] binder: 23912:23914 BC_FREE_BUFFER u0000000000000000 no match
[  369.988558] binder: 23910:23916 got transaction to invalid handle
[  370.008936] binder: 23910:23916 transaction failed 29201/-22, size 0-0 line 3018
[  370.009270] binder: 23859:23864 BC_DEAD_BINDER_DONE 0000000000000004 not found
07:02:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40100, 0x0)
write$P9_RWALK(r2, &(0x7f0000000080)={0x3d, 0x6f, 0x2, {0x4, [{0x82, 0x2, 0x8}, {0x10, 0x4, 0x1}, {0x10, 0x2, 0x4}, {0x95, 0x4, 0x5}]}}, 0x3d)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="035e0000", @ANYRES64=0x0], 0x0, 0x0, 0x0})
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000000c0)={0x9, {0x1, 0x5000000000, 0x4, 0x0, 0x6, 0x7}})
fcntl$addseals(r3, 0x409, 0x1)

07:02:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200001, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
fcntl$dupfd(r2, 0x0, r2)
ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000180))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, <r4=>r1, 0x0, 0xd, &(0x7f0000000100)='/dev/binder#\x00'}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634844aa"], 0x0, 0x0, 0x0})

07:02:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:24 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

[  370.026566] binder: binder_mmap: 23859 20ffc000-21000000 bad vm_flags failed -1
[  370.031881] binder: undelivered TRANSACTION_ERROR: 29201
[  370.040612] binder: 23859:23864 ERROR: BC_REGISTER_LOOPER called without request
[  370.049651] binder: 23859:23864 BC_INCREFS_DONE u0000000000000000 no match
07:02:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

07:02:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00')
ioctl$RTC_AIE_OFF(r1, 0x7002)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  370.107235] binder: 23929:23933 unknown command 24067
[  370.115792] binder: binder_mmap: 23932 20ffa000-20ffe000 bad vm_flags failed -1
[  370.129400] binder: 23929:23933 ioctl c0306201 20000240 returned -22
[  370.138133] binder: 23930:23935 unknown command 1145594641
[  370.147464] binder: 23930:23935 ioctl c0306201 20000300 returned -22
[  370.190268] binder: 23930:23943 unknown command 1145594641
[  370.206649] binder: 23942:23947 BC_FREE_BUFFER u0000000000000000 no match
[  370.215589] binder: binder_mmap: 23946 20ffc000-21000000 bad vm_flags failed -1
[  370.221491] binder: 23930:23943 ioctl c0306201 20000300 returned -22
[  370.242524] binder: binder_mmap: 23946 20ffc000-21000000 bad vm_flags failed -1
07:02:25 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
fgetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0), 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6400002f73670500"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='rootfs\x00', 0x10, &(0x7f0000000140)='$\x00')
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
signalfd4(r1, &(0x7f0000000000)={0x2d4}, 0x8, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x39)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)

07:02:25 executing program 0:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x110, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000000}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r2, 0x0)

[  370.364889] binder: 23962:23964 got transaction to invalid handle
[  370.372972] binder: 23962:23964 transaction failed 29201/-22, size 0-0 line 3018
[  370.384063] binder: 23961:23966 BC_FREE_BUFFER u0000000000000000 no match
[  370.392797] binder: binder_mmap: 23960 20ffc000-21000000 bad vm_flags failed -1
07:02:25 executing program 3:
r0 = socket(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001280)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003b40)={'team0\x00', <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003b80)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000003c80)=0xe8)
getsockname(0xffffffffffffff9c, &(0x7f0000003cc0)=@hci={0x1f, <r5=>0x0}, &(0x7f0000003d40)=0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003d80)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000003e80)=0xe8)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x94, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x100000000}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000040c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004080)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r1, @ANYBLOB="000829bd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="200102003800010024000100616374697665706f727400000000000000000000000000000000000004400000000000000000000000002bba4a2ca755caf3736a9176c78a062ab0ad878f9ba85424377119241f6b93bbd33f27047dabac6ac0648afdc083cc26dadccd85e78f785181135c57", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r5, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000100fd03f7ffffff0000666c000000000004040505000000040003080900000004004e1f040000004b090001080000000800ffbc0000010008000100", @ANYRES32=r6, @ANYBLOB="4800020044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b757000000000"], 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r8 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={<r11=>0x0}, &(0x7f0000000080)=0xc)
ptrace$setregset(0x4205, r11, 0x1, &(0x7f00000000c0)={&(0x7f0000000280)="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", 0x1000})
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
fsetxattr(r9, &(0x7f00000012c0)=@known='system.posix_acl_access\x00', &(0x7f0000001300)='/dev/binder#\x00', 0xd, 0xdad351d866749dfd)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  370.414272] binder: undelivered TRANSACTION_ERROR: 29201
[  370.508268] binder: 23972:23974 BC_FREE_BUFFER u0000000000000000 no match
07:02:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x111000, 0x8e)

07:02:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000029}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f40000004d82d6d3a9e6d22e01b14b8e1598ff0f000000000000", @ANYRES16=r2, @ANYBLOB="060326bd700008000000030000001400020008000b000200000008000300020000001c000300080007004e20000008000400780f000008000800e10000005c000300080008000000000014000200677265746170300000000000000000000800080006000000080007004e24000014000600ff02000000000000000000000000000108000300030000000800040006000000080007004e210000440003000800040096a8000014000600fe8000000000000000000000000000aa14000600000000000000000000000000000000000800080003000000080001000200000008000500030000000800060004000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20008004}, 0x44004)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7)
syz_execute_func(&(0x7f0000000340)="c483957c04d613f22e47d308660f3804dac463bd7acb00c4611df4e5c4e1785d0500088041660f6ee2c403e569e200660fd7e3c4e1bf2a74d33e")
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x3ff, 0x80, 0xfff, 0xfffffffffffffbff, 0x5})
memfd_create(&(0x7f00000000c0)='/selinux/policy\x00', 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xd0f)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xe)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x4)

07:02:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000002500)={<r2=>0x0, <r3=>0x0})
rt_sigtimedwait(&(0x7f0000002440)={0x7f}, &(0x7f0000002480), &(0x7f0000002540)={r2, r3+10000000}, 0x8)
r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="c38f779e50322a9ce9bdcf77e775eb82f13fab2459f187c4d4ad77ab1ab2751e802a7822edb38d3a213f715f6b8f652b266bbdc9f0a435b4b2037368bc7048606c2f01deb1147c906b2b407801eaab339bdc6e3d93767879682e503774869ea85b330da10da6bbfadc392a7554b9285fa14edf2de86a1188b8cc15d968952345ab07591a50", 0x85, 0xfffffffffffffffb)
r5 = request_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000002580)='%.#@/\x00', 0xfffffffffffffff8)
keyctl$instantiate_iov(0x14, r4, &(0x7f0000000200)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="e82ed2529b28d8b5a61ef193baeb4c006ba657691d04e1cc26ec2e38701c35bfc4bd3815935a33e057fedf68fede5b6a41d8261555f5fdec7dd460c0f324e575f2c1861851ace646d0956468311f4564c04ebef5b8380ea142acfa33b2bebf9cfbe00a6b25f934cb2004855657d2b01661867e6eeb818ed217d7614c0a0887c6794e37b961369c93fd47192440c7ef72c32aa6dc59792ac03d28a5bc766269a0dc29d357fb546f2f", 0xa8}, {&(0x7f00000000c0)="404d58057c2c2520bc6f970f0269d208aa929a450003", 0x16}, {&(0x7f0000001400)="a92e5ec5eddfc69dbf7ce5d6b63ee40b72b104a529d8e09d2b71921697acc7568facaa37a300b12a975428afc5198785bf95dd010cb0c64107cc2d3ccfe993491097551e3c182a5928382942ceb208ca93358efc7de22167b58c3e2b9654099edd5949af2661a0739aef42fb2b95a6c3387a819ba9abb2f4cf7a299df7de4d6007b4eba004eaecb07d6d33cda76cc67c62b2fd94082d92a7dc6e416cf40d9ca5b8bd4ec226529eb0a33e4db55e0999f75a36859b4a657afba1dfda62e30185bc1797659575089d152eae3d10c45a8f696471027d020c044f5a855ef545980b515cafd47c4f3b4c334a07651588de5e2fd64c4ba25705e18d20ddce11e0967fcf857f3a3851b4c5406cc11fbb0ea94842e5d83a85bc19b53d29f0a1341b2eddfa6eefd7527567dd4accc078de77ea21301de80a45dcfa8c9f97abd9517ee94e70a8441906199e56d4685ab48abfa7bda3722a35b53a1a40b30c7f7a4781082bf7e61494751d330a42d48121267fad66dbc39a00f44d97b189b0d984dd7e6c9ef32685341d757f35fd09b89699008b66aa7cfe009ab27ea56c5ece161cfc7abe62a53a67a4b3f9c14c93286fad124c77b9a99a8a75ae558b0fcdd8fe1272971e2d528e17dd9929ce78dafd491b3a0917dbb11484e269d5c9913a132330d24b72e1154bb8d2136675356e9fe91f44038ec3896a501729496efef10aa360f5934a84290b186ba7dd5b395fd1f42f985f056a5013525110b200d049f38899094563a978826c37ccd63df6051862645fc20a377398af157a1b2454ac366155084b421d858c181834f33adaf79d2706769ea5bd08b74782d92149e96fae5ab84d832366d2d1ef239501b7002ff256318565139ea9ebb9be4dfdd035b46797b8d34703f5886dd1a3f5fec248ded98849f705f25d88048741ce3bc13dc937f4668394d57741d11d3db2dcd7cea58811e4ce044451973337e586d46077d9d25406011cea5413f249b1d74fc825fe0fd429a7195a56a7d329c1884b1e9df3039a40f987691e8f9db588cd558647fe6ee1ca9c98c7d59413dfc000a50e51a4b00cde2de0a94681d82c7769c7fa123d3fbf026a8e8ba4baafa662d121d8fd183a33d7311d1b1c02b5a8c85aaec82e7e86034cf399afc71b7aff6f44d125987b630ea7fc6a1366e64814ff50c64e6e5c124bea34667b196ad02f701d16815bb8c6af089df66d2a3d42f098369f62b5ab8f6a696196c5093f0c57ac3c4a3ee0f0d027715f6360818d813d2f252b489df62d450fa3f57721de93b3ae9e819e5af4b82a073345769aa2a10aa1e0251029977ec2b40e403848a277875857f390e44e1fcf92ecfafc2b662ca95418911735f8faf9d4b468f8adef13e7964888d979ff83ed5296450c80dcdbf19f41be4827568a9c9bcc6032e61d9037670672c2e415148add455afa6c10fbb793bac1f2a27a145d1e2aa49a53e10b4edbccf4d7c8eb3b51329a88bcde33d28c3f8b9f9ab2fa61556ee148f8cd318698129d233f0342a1b6d597667bc413d44d12d6b9079338658253ab8a2e9cd0375f3d48bfc540790073407e7eeaa424823cd64d794fe02cacf64767a260bd3e9094014b3670aba9332874afc53f3e8bac4324827a4043f953358633699ad3193c96b74a497ff5d357824d5ae513fdadf6abe7a2d85c96f71cbea1a5d9027e52ea24e4c3290e80d8f236103731a70a19919a1c590ff4c0d6a45055f8ff98a5161febf652e9c7cb9c90b3cc1bb85d801bc1b7dc950ad1b75288cde45888a39584641dbfdb02fb125f4af12030a2d874b83bcee944de41676d26f959e28aac92a047e03e671b38cb75ce1b5f3a15f9ad452abc252a951ad5d7bf65f84cf4df63b25c94158baa3d8eb695a24ff54b67886ae60e6567236a3e71236c526e5e3c0fd8f3944eb7e50aac444444b03454d1af75fdaec80543d2027f3903ddcf0a23a554cae40ef82676681b6084276583be6273e658efaf1465ee32ad7f1c0e5e8d5bb98a1c88f5a712bca707fb31f146cf801c2e3be77e99b8dc081e42b6b3d5ff7dcedc66c8fe2334145da6245b9813043fc143835a8425dfb90f425b98a6fc3be717703dd76798efe490fd15afb958802526544f10229b87bdf8e2a056c293d93b13ce70555e3465c56f7c8f0029cf2345378f05fde5eb2c939121ffff6069ea7aeb409426ddd4c28f873db9e553deb512bf499cf9cf7e5131c56ea2cfc733c3e8c12dc104ae030e1959c512fb3d5975bc3fa3fcd5d4d4d2931852316eaf28318419a14d15d82a088052fc01b1ad68cb4c0b8f864f0fa98884c1a1626f54cea7b3bbc3d87bbddc0bbd3ed16c9d668be85678e10a70ae93d871c971ce65705e51f0e90bf8f612ef17a790e88217838922a02f079df341fd3b4a222a5aa6bc20e3a0b77b6c84a643da32dc7b5ec0349e7a23ff0ab3b4424d0461c153ee8cfef8d042cf5544ce91f4d188ec37b70a5de63bc6945b94c051a8dce838c6844819542c9a62bc0b9a5aa1915a157a2ffb3cd5908732bfb5122ebbcb5ce22e1e35da2c4d762f5b74c826f36b0486c73236310774040c865ded35d1949833d793b2e4eb84cc32aa40efe3964aedc1783bbe8725b4deaa780a570f7fba60a126a96b84e0eff9205c63d7d7cfe731de09736111879ceac0e78b92f3199276a74c55e33b59fb6c93eccdee6a4874fd53dc019d844d7ceddd77e90210d7b2e37da3c9b99145ee9ab30cf6961aeb218e066cc0c4b0d7e6bbd6f870601a7d2e88cbfd3bf176bf99fa93c45555d84ba97f8f66da8efb8ed0599d664471c879455a6bdf582ecb5743ceeee419abdab9b51fc1467b5310bd5b44292844f4e2f7e203356c54c569eb42f551b0e38a67646583f033f8758fe8d448c99ea38933137e99795831e3d03b525e649887b43662d02803078ab748de6c0fb9b3b6f8ee06ad7b47e260d8336cef8b744a5dc48625b6259648874c0a6510ab2082ba628a6a5442d061cffd516161c7ac1acd698c74452add3127d33aa7262689265949c303637853dd09d3cbfb02872a540d6967b5a819b36131a8c2f16cbab52fe59d6dbb793a6cf6acc8d147363d1b9f7b97051ef00ba88f9e071206022e3eafe1ca6aec7f3ae137da70ece25c005d240d488b23fe8184ccafe85a410ba48a191365ff61d06a21f1d52e5da3418b1c75e2024ed336832bd87cbeb9b3adbbaff854c73fb22a7f908fabebb261ad454f221e57e4f99f73ecb883d74f8c8b71fceea32487a3af87ad4ad9b49673898cc435234acd0e455a14d81866814b5e5269174cca023bc3917cf29388b019203c64fe8148ecc08f9ab2feedbebf6e3283e7090aaf6d620eeeec1a91a0a0370073682c1c15041cc569bdff5c0bd3e2e89387622dfb2457d12759fb6601ff871e5682fdee803c2e08e94085133adb3fff0e0e8742433afc4edbf04613169347bd9f64f61fc833b7a93ab3a7b534ee8525e1b526f78b16c07e923252fa22e80100228ba186b89a521e5d435499ecf788cc1ce7e9b601621d99a5cddab0eb4255ad9e9058087ead745e2447228f597cd9911f020577f3d900b7b326f5910e04a84e61c7a68f6fb3604130eb51535cc3991d833dbf8239d512826a7027aaf996e8871f3652437c7031233eed87d9d54366cc26f309a6ebc31268b13a6d06e4bec51a4c3683c32783b85b84d8f845a4450c5d4964a9f36440cfc4c50706c456a901638333ca947213d2e5fe21e48f21897580c9110cb64f2882b53fc2efe32d4626414c2c0e16645ef47fd52ee3b3afdf6c96d80939f5dd87eaa950cca05e47a6cacb74586b4cc869f022e42477931e7ca4f2de211f58a93288fa799c82a506954f4dd2fc838f83005cea5bc45a2535ca0e288948e5eb49bcfeca713b4c2864e7f910f670f5521eb60a364d06fe8273dcae0f63ce76f5753926aeca1af3eb60a1b317adbe7e9d7d12ca0c5f43c5fca31507d68c10a971fa5b329a2368c6c1403e1f997aa84b080e5cd39307371f10043ba28d11384ab742dd419c4430c2b6367984f1e99cd60bf5befa969489b72cc0976c80ca458a4a02daad37eb1483e3f805f251ac6c8301d75edf42b17d8add13e235736072d7ef1c15c2599349fb982594120245fe3456835e6eddc917db556479a578aa6379d8189f2186fcc7c26b63c900a8fbd68b82e19e16855c4fb95f1db5d94db27e631ab92a77df0efeb51834557d185a0a3d345cc6f8f2b878f98d78e97de2d434297fb4dad18343572b5c25bce964ab8737662878c4e70af74f8703a4e7081e7eb3398d1a04e62794191416ba9a4e7459ed3f292ce2616172cf27d9e6c794ccd3b60ab43d905c3fb23ee8e4a5152a622e96620b4c7990de7701b2b9c80a3b81645e4c6a2bf67960e1e80b5259e8401e6941c864b63c65e367c01c33100aa4f3ef14c9e5f676aebd891ac53168e5cd4870d4fafd631bdd233d68e0a79123768e6ceebcd7eae149b3d8288474fc6954a9b2b654604d3801461b23d1dc8c6039f64ea51f1a95c61f17371ebf132a93f1ae2d27a05cd0faa65ef40c66b16f264a0da5caefc2b162dc8c63130f081e195d817d12d52e8b107600f28ed6a1a9d5462966c08d5ddf7b37b4a75c27d49e2aca0fe34a8edda85aa6b1270ada3c9253c16ee47d15ed122215b3ab55962dce705c6189ca7ba27e3ce90a9f273791bbad796f93b29771b1275bfde417d6bd283399905063390a1027ec209ad873b3f3cd9f724719e01e0916ebcc2b9f669ab3d801ac76b77d027562437f5e645be801694c0f945eb6018b650780d75220bee727b763728c91dcaf03d5f18386beda383e72ddf1e2ce5530fe3e45e9fea81ec62b9d1ed975fd19ab7de881d3e92cbf16897b8df369f832a1ea7d3109d25a4a617d4ad5cc5a9bde152c5ba9ce63de567faa5e3739782a7a0908e6bae2d8056ca4c0d3b690a7a14ea1f3135a174127f23e917acf596d2eebf1e5a4c0fc8bb46bb3ac1b455ebd43ebcbbc454f8ffdc0a07917d52e88bc632dff2f566d74936da43c3a4f98f9665fb304977f646d0a724c061b22dbc4a484a6195d4ae7c0b75b8d0ed30883adc80f5d6aa3dfd4f77190c03b0b07cdbad01713dc936b444bf6fe309c587927aaad4158e3f121e21bb2a30b82bbf77f5faf4597075b8ad799737b168250dda6fdd387e3e3ecc77950ff2b07857cf48b197c40ce6c0c4288306b6b64f062a1a07453ed1acfc0ddb6479cb7702902ac027d25e0280f24deca69de3c85a857a7e5cebbceaf6e07cee5f226056a54057139e9963f9154c3eae4c49394463c4df3ce0c33768d95e72b2322c27f968f1b4f40a54d7e8b2feba6ec829bb5235c923b2c85adce7c24f22bbfe3cd6740cceca269eb7ed8d9b2ebd37c6d4e11ea336ac6035528183328a68d4a7ada44ddca8647f562e8291016e024e2777d139166639da0ed99d30fb6905e3d759758056355fd6e443a26eed9a15886301e452fea051aea1848aec06d8345924f263290845dc65da4c09b547bf8a5cc37b2e0717bde1c814adb51c3d3f06629ffd10437c3fbbf71589545390a3feaab9127bc543a1f0d45ee528651f5592ddc60a31e5e3290d5e8ba5472f731bb8d0856ae366b492bae22b9fa28568b52a43d2ec4c63eeff5673b4484bd5a157688a53713e4ed910c68e4c57a72ef942ab56d6b836ecd85af2ae5b1da89a68cd42d1522cbe145c12d3a29b6a2662a09186c79d6ae5bccacd81f2f967edf7066a12435913e17c8be16c26fc4865ced060d95a2e04ca5919592a2ff", 0x1000}], 0x4, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840b9"], 0x0, 0x0, 0x0})
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/mls\x00', 0x0, 0x0)
inotify_init1(0x0)

07:02:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x400, 0x3, 0x1, 0x0, 0x0, 0x1f, 0x1000, 0x6, 0x1ff, 0x8001, 0x1, 0x9, 0x7, 0x0, 0x9, 0x5, 0x7, 0x8, 0x2, 0xffffff8000000000, 0x3ff, 0x7, 0x7fffffff, 0x4, 0x0, 0x80, 0x7, 0x5, 0x400, 0x81, 0x3, 0x7, 0x80, 0x3ff, 0x8f, 0x100000000, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x200, 0x9, 0x3f, 0x5, 0x6, 0xff, 0x5}, 0xffffffffffffffff, 0x10, 0xffffffffffffff9c, 0x4)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:27 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40400, 0x54)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'rose0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delqdisc={0x6c, 0x25, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, r1, {0xfff1}, {0x0, 0x3}, {0xf, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x30, 0x8, [@TCA_STAB_DATA={0x10, 0x2, [0x0, 0x1f, 0x6, 0x7, 0xffff]}, @TCA_STAB_DATA={0x8, 0x2, [0x40000000000000, 0xa6]}, @TCA_STAB_DATA={0x10, 0x2, [0x7, 0x4, 0xf7, 0x2, 0x9, 0x6]}, @TCA_STAB_DATA={0x4}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1fffe000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)=ANY=[@ANYBLOB="0300ce003f38edec80739f99f53f2feb1c0765cac6f2fce558aa62cb28b9ef5dfa7d9e170d043dd52d806a5ce7719fb73ace487c6b7592c7f415ba1e4cfad7d20273a651aee362153a5dbab2e357335ec22ab785b1363ca5e3a031c5240b70ca254307ac4409ba74755694a067c07992eb589f0a7fcc3c6aeaf2f7deef987e82a9fbd8978f9ee6fef704fe78ed3f9f7b0fc1b8ea37cda487e0cca60a4b6d8bf8d6df51d5520483cbede0b8e7d4dcf4eb52922113730baba1ba9d3a727995320ba9249d0ade327dcaec204e1b958644983a42"])
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

07:02:27 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
recvmmsg(r0, &(0x7f0000004740)=[{{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/110, 0x6e}], 0x5, &(0x7f0000000400)=""/186, 0xba}, 0xffffffff00000000}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/4, 0x4}], 0x3, &(0x7f00000006c0)=""/182, 0xb6}, 0x35c}, {{&(0x7f0000000780)=@l2, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/17, 0x11}, {&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000000a40)=""/103, 0x67}], 0x4, &(0x7f0000000b00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001b00)=@hci={0x1f, <r1=>0x0}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/225, 0xe1}, {&(0x7f0000001c80)=""/66, 0x42}, {&(0x7f0000001d00)=""/249, 0xf9}], 0x3, &(0x7f0000001e40)=""/156, 0x9c}, 0x1}, {{&(0x7f0000001f00)=@rc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/100, 0x64}, {&(0x7f0000002000)=""/161, 0xa1}], 0x2, &(0x7f0000002100)=""/215, 0xd7}, 0x1}, {{&(0x7f0000002200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003440)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/85, 0x55}, {&(0x7f0000003300)=""/82, 0x52}, {&(0x7f0000003380)=""/175, 0xaf}], 0x4, &(0x7f0000003480)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004480)=@generic, 0x80, &(0x7f0000004640)=[{&(0x7f0000004500)=""/15, 0xf}, {&(0x7f0000004540)=""/246, 0xf6}], 0x2, &(0x7f0000004680)=""/177, 0xb1}, 0xc5b7}], 0x7, 0x20, 0x0)
stat(&(0x7f0000004900)='./file0\x00', &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000049c0)={{{@in6=@rand_addr="d8a5d6621d968ad4f102179ca02188dc", @in=@empty, 0x4e23, 0x0, 0x4e22, 0x9, 0x2, 0x80, 0x80, 0x0, r1, r2}, {0x100000000, 0x39c3, 0x7fff, 0xffff, 0x5872, 0x3ff, 0x100, 0xef0a}, {0x1, 0xffffffff80000001, 0x0, 0x800}, 0x5, 0x6e6bbd, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4d4, 0xff}, 0xa, @in=@multicast1, 0x3503, 0x7, 0x2, 0x2, 0x9, 0x3ff, 0x6b54ca50}}, 0xe8)

07:02:27 executing program 0:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000080)=[@enter_looper, @acquire_done={0x40106309, r1, 0x2}], 0x8e, 0x0, &(0x7f0000000140)="3e177f9209ffc4aa446b0b4dfe1d9e1354512b3b2a48f3ddb9c827d353072d01ffd7a90908547716c171668228390a0a66dc546a1c785d1596ad1fb9a21192d5dde05029428aaf9bbbdd387e07beada3fd4d6ddc6539e2169f2be2cd370bf1e404514646de1075b055a4ccd2eb1898aca6a2e14022467d94557efe8d095f2b6b443074aad264e2d2fcb1c87823e3"})
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r2, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x505, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf31be25454486ea6}, 0x40)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={<r5=>0x0}, &(0x7f0000000240)=0xc)
sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x7)

07:02:27 executing program 3:
r0 = syz_open_dev$binder(0x0, 0x0, 0x7fc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fa0b0000000000e7773cf6506b59ebf6dc7560de856091aa8b0a69c8d1666528660439effa075b06152f10987cc808970d05c27aaeed26c64a631989cc8970fa25c670b8fad73dea2cfe6f495390717fbb3fc60da63d6a1d72aa105b7ae60094974595ab07e5bce23c4b784279a4c3dda3c342330dff7c562ca7ac3209cc002fea854208b5189ac8eeb868235194d70b2f8e86160d33c0550191fabb49affbb0d02316d83397c5a8a2c76aa811db14d5adf1052d5b8b7a824d5361", @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  372.582609] binder: 24004:24007 BC_FREE_BUFFER u0000000000000000 no match
[  372.592444] binder: 24004:24010 BC_FREE_BUFFER u0000000000000000 no match
07:02:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$void(r0, 0x5452)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)={0x0, @speck128})

07:02:27 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x551e5a03, {0x2e47, 0x9, 0x6, 0x4, 0x6, 0x6f1d7c1d}})
sendfile(r0, r0, 0x0, 0x3)

07:02:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x359, 0x0, &(0x7f0000000080), 0x1da, 0x0, 0x0})

[  372.654099] binder: binder_mmap: 24020 20ffc000-21000000 bad vm_flags failed -1
[  372.673910] binder: 24003:24031 got transaction to invalid handle
[  372.696386] binder: 24003:24031 transaction failed 29201/-22, size 0-0 line 3018
07:02:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))
r1 = socket(0x2, 0x80f, 0x412)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e4, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7b384d1c}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @remote, 0xffffffffffffffc0}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50aafa56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffc0}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x622cc995, @empty, 0xfffffffffffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xcf9, @ipv4={[], [], @loopback}}}}}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaed6}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xe07, @remote, 0x2c}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

07:02:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x7fe)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r4 = accept4(r2, &(0x7f00000004c0)=@pppoe, &(0x7f0000000540)=0x80, 0x80000)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000580))

07:02:27 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'oom_adj\x00'}, {0x20, 'oom_adj\x00'}], 0xa, "7524f8798c9fa26344c3d9204dfa7a501b8cf4ce5f19452a8a7c784c0050017092f1b9f746f672e8b34f762f99292c936cfb63c0bc5649caf7a508d054934ca4381a03d25d8216be246e7f38524ceae0e804c9efb2daef9fb6ee4aeb01f735922b9b35e96efd8678d567671e601bfa84a3157585ce8836a5b2f9b28b3c5ee566e533bebb16c215e9126137a98dd2f79f0752c2026a46f100925d00e3ab337ed585c934b3e4adfd0358c70b9d0abd1f2e800edc7132f0639dc1898674fd79d23ddaa0f1cadac4bb9c2af6e0c282103a758b840cffa5c47861e4e20aff85325364cd10b5a5e5d2358576f0c908b3b3"}, 0x10b)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

[  372.725544] binder: 24035:24041 unknown command 0
[  372.737717] binder: 24035:24041 ioctl c0306201 20000000 returned -22
07:02:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x49, 0x0, &(0x7f0000000080)="dffbd6b3e5d8d6e75f2f27509e389ef55967698a74b2da3b0b476e30b84f97ca754ee7e2d5571234042354bdeeea652e4e773486165b97a86bcd2f4fac060317b1b1f0f259367493e2"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

07:02:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x7, 0x6, 0x5, 0xfffffffffffffff8}, {0x2, 0x0, 0xb8ac, 0x8001}, {0x8, 0x8, 0x20, 0x5}, {0x8000000000000, 0x1f, 0x5}, {0xffffffff, 0x80, 0x1}, {0xffffffffffffc01b, 0x9, 0x6, 0x9}, {0x6, 0x8, 0x2, 0x7}, {0x7f, 0x3ff, 0x6, 0xfc89}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe4, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x36a6}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf03000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb71}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x40005)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:28 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='schedstat\x00')
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x220000, 0x100)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040))
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000140)=""/229)

07:02:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})
pipe2$9p(&(0x7f0000000140), 0x84800)

07:02:28 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x8)

[  373.406490] binder: undelivered TRANSACTION_ERROR: 29201
[  373.440813] binder: binder_mmap: 24075 20ffc000-21000000 bad vm_flags failed -1
07:02:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'sit0\x00'}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
eventfd2(0x3, 0x801)

07:02:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="115e4840aa33a116d704eddfe2251b8f66b5aa16bcd6d9c2cbe45f0db8a3dc98a9b8201a34282f6acef955e886d90562d7de7efb805b4dbd3961c268083ac3a76055cc51357044006352d1fd7b2c0610c3c6d4e62af3ed9f06ee57187d095c403250294e8e1ed55a9b6b359743c1f5ea24c26621183e290fb5e19f444d3ef3f9540571e0318882ff61b7548976cb85d4e7573f3928b31388f73519f0050f0af3ab962714f472e023e8458536f690eab377"], 0x0, 0x0, 0x0})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getrule={0x20, 0x22, 0x811, 0x70bd27, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x9, 0x2, 0x0, 0x0, 0x0, 0x3}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
r4 = dup3(r2, r1, 0x80000)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @remote, 0x9}, 0x1c)

[  373.449536] binder: 24078:24081 ERROR: BC_REGISTER_LOOPER called without request
[  373.457637] binder: 24074:24083 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  373.467877] binder: 24074:24083 got reply transaction with no transaction stack
[  373.476162] binder: 24074:24083 transaction failed 29201/-71, size 40-40 line 2926
[  373.477053] binder: 24072:24084 unknown command 1726968718
[  373.490673] binder: 24072:24084 ioctl c0306201 20000240 returned -22
07:02:28 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x181802, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

[  373.514003] binder: 24074:24089 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  373.553341] binder: 24074:24089 got reply transaction with no transaction stack
07:02:28 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20201}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x202, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c0c4)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r2, 0x0)

07:02:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x37)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xa7})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="607dee8edc7b4c043d10a4716a0828107dd884b57e7df9ed49983a3287f68c7c0a3802d55c4af3c0ed37ecdbef31504072514789e17d0304d0a3646ff8dc05824ce8a519506e9bbb79f875072cff88b0fe1cce7a98f39cefad7ee426078d38c086ce9367f0fc5cf7f3f449d2d0c6d3b2ca365329727b3918654fb5f87c86547f00899a53e1a6309dca2e3314804073c3e872309498b7e00803fb4d57029c1801934c37eef38aaf", 0xa7, 0xffffffffffffffff)
signalfd4(r0, &(0x7f00000001c0)={0x1}, 0x8, 0x80800)
keyctl$invalidate(0x15, r2)

07:02:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x200000000003ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  373.556869] binder: binder_mmap: 24091 20ffc000-21000000 bad vm_flags failed -1
[  373.564663] binder: 24092:24099 unknown command 1078484497
[  373.581693] binder: 24074:24089 transaction failed 29201/-71, size 40-40 line 2926
[  373.589715] binder: 24092:24099 ioctl c0306201 20000300 returned -22
[  373.605760] binder: 24098:24101 BC_FREE_BUFFER u0000000000000000 no match
07:02:28 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20800, 0x0)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0xd)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

[  373.697611] binder: binder_mmap: 24106 20ffc000-21000000 bad vm_flags failed -1
[  373.705896] binder: 24124:24124 got transaction to invalid handle
[  373.715218] binder: 24124:24124 transaction failed 29201/-22, size 0-0 line 3018
07:02:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = fcntl$dupfd(r1, 0x406, r1)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000140)={0x0, 0x6, 0x8000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x88)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "37240553836e39f6bdbc429b0b03c781b215b968"}, 0x15, 0x1)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080))
fdatasync(r1)

07:02:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840389028641580de1e59e4b61f5297f54d25682d372e3178a79106e99aee0636b0bfa3136c18cb7830d41f38a2a9f3e6511acb2f59482f5bd1105bade561ef749ab3e99a35db2d7478449d21664dd48542986ac84091b4c58e3fdb83ffcb9d7963f8266d3e6625d57a2086f45855f5394bb54e8b3010f62a3dec76c4ec803a", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:28 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xd1b)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
init_module(&(0x7f00000000c0)='\x00', 0x1, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00')
sendfile(r1, r1, 0x0, 0x3)

07:02:28 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prctl$PR_CAPBSET_READ(0x17, 0x11)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r3 = dup2(r1, r0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x110)

[  373.758431] binder: undelivered TRANSACTION_ERROR: 29201
07:02:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  373.806529] binder: 24149:24152 BC_FREE_BUFFER u1ede801564289038 no match
[  373.806944] binder: 24150:24158 unknown command 0
[  373.818850] binder: 24150:24158 ioctl c0306201 20000300 returned -22
[  373.825486] binder: 24148:24157 ioctl 6611 0 returned -22
07:02:28 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000000)='oom_adj\x00', 0x3)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, [], [{0x8000, 0x2, 0x7, 0x2, 0x7, 0xe8}, {0x2, 0x1, 0x7ff, 0xd50f, 0x100, 0x4}], [[], [], [], [], [], [], []]})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8)
recvfrom$packet(r2, &(0x7f0000000080)=""/83, 0x53, 0x41, &(0x7f0000000200)={0x11, 0xfd, r3, 0x1, 0x9, 0x6, @random="d84004bebda0"}, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  373.858145] binder: 24159:24164 unknown command 0
[  373.871636] binder: 24159:24164 ioctl c0306201 20000240 returned -22
[  373.900751] binder: 24167:24169 got transaction to invalid handle
[  373.912403] binder: binder_mmap: 24162 20ffc000-21000000 bad vm_flags failed -1
[  373.912835] binder: 24167:24169 transaction failed 29201/-22, size 0-0 line 3018
[  373.966562] binder: undelivered TRANSACTION_ERROR: 29201
07:02:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100012, r0, 0x0)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e24, @broadcast}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0x9, 0x5, 0x4, 0xb7, 0x0, 0x5a, 0x88, 0x2, 0x6, 0x3, 0x20, 0xffffffff, 0x1ff, 0x8000, 0x2, 0x800, 0x100, 0x6, 0x9, 0x31b3, 0x9, 0x6, 0x400, 0x8, 0x6df, 0x7, 0x1, 0x7, 0x100000000, 0x24000000000, 0x800000000, 0x1, 0xfffffffffffffffa, 0x1f, 0xe4, 0x10001, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x50cd, 0x14b0, 0x8, 0x81, 0x9})
write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x29, 0x2, 0x6}}, 0x14)

07:02:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840a8a89a0eeab7b2dc1fb7eb75e2c2fe8a786298cca2c86676637bdb0ade7020ede79f8a66c001b593abb2a8f6bfa132269e6615a9c3b2affb04623c4c2bc3594766bb030edd1e953c54e22e2cbc7d4193ac5db75094", @ANYRES64=0x0], 0x0, 0x0, 0x0})

07:02:31 executing program 4:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
lseek(r0, 0x0, 0x4)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)
ioctl$int_in(r1, 0x5473, &(0x7f0000000000)=0x100000001)

07:02:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYPTR64], @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRESDEC=r1]]], 0x0, 0x0, 0x0})

07:02:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = geteuid()
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x1)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x2, r1}], {0x4, 0x5}, [{0x8, 0x6, r2}, {0x8, 0x3, r3}], {0x10, 0x5}, {0x20, 0x1}}, 0x3c, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")

07:02:31 executing program 2:
r0 = accept(0xffffffffffffff9c, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80)
write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="cf010900190200003e030000e4080000d70300000200000000000000000000002f0f61b0675ef2aa46df21d90d3dbb8d18cacc4dedb9274f160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e97a41be4235efca1779b0bd32cd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000a7804d2636908e2e9cbe5bece57402a5c2b99332ea0ec7429fe5510ef4ea7550f4e7f8d70eb4f01849e4b316267dbe5695178b81b345acf5a1ae00000000000000000000451baf4dd8860c897fc44eef1eb1e4aee6c62418cb73f26e37cd4f4ef3b46ba89d4ec9f6e7a2a2c98b26533aabd348c5e8adda924db2412925c3e290d994678907be3c2e2bb8a05d3be52f3303e4bae39c3485cf4b5b823244219d3aac7189668c21d197c5de62fc7b03d18b96a8032769c810880e054ce33c9207b9587ae59124"], 0x739)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bond_slave_1\x00'})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)

07:02:31 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x1, 0xd425})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x000E\xe2\x03\t!\xe6\xedh7\xe4VQ\x80g\x1a.\x10\xd3\x13,\xfb\x7fD]\xa8I\xafi\n0\xc2_\xad\xc6\xe1Gs\x8cF\xcc\x0fr\xb9\xca\x88\x9f\xc507n\xb2\x9e%R\x96\xd9\x8cP\xae\x1fGcrG\xbe\xb6[\xde\x1cw\x90\xabx/\xbc\x9f\t\x85\xb7__\xea\x10\xe1\x05<\xec\xb8}\xc2\xee\xcf8\x06I:\xed\x9e\xa7x\x19(gA\xde\xc4l\xdc\xca\xa3a\xde\xfa\x7f\xa9\xcc\t\xb2\x14\xe1UP\xc6\xd4\xdc\xbf\x8e8q\xf6\x0e-`\xaa \xd9\x1e\xe3\xd1d\x05\xa6}\xc5\x16\xdb\xae\xdd\xdd\x8c\x16\x96\aw\xb3\x9c\v\xeb2\x04C9^k\xe9N\xc3\xb2\x8a\xea\xfel\xfa\xaf\x86\xa6\x8a\xcc\x8a\xe9q')
exit(0x0)
sendfile(r1, r1, 0x0, 0x4)
fsetxattr$security_smack_entry(r1, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000180)='/dev/keychord\x00', 0xe, 0x3)

[  376.659779] binder: 24193:24195 unknown command 536871232
[  376.668077] binder: 24190:24196 ioctl 8912 4001ff returned -22
[  376.678073] binder: 24193:24195 ioctl c0306201 20000300 returned -22
[  376.688155] binder: 24191:24198 BC_FREE_BUFFER udcb2b7ea0e9aa8a8 no match
[  376.696724] binder: 24190:24196 ioctl 4008240b 20000140 returned -22
07:02:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x403, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="91e3", @ANYRES64=0x0], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10)
write$P9_RVERSION(r2, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x8001, 0x6, '9P2000'}, 0x13)

[  376.724988] binder: 24190:24196 ioctl 8912 4001ff returned -22
[  376.726721] binder: 24190:24206 ioctl 4008240b 20000140 returned -22
07:02:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

[  376.785447] binder: 24212:24218 got transaction to invalid handle
[  376.808621] binder: 24214:24223 unknown command 58257
[  376.824113] binder: 24212:24218 transaction failed 29201/-22, size 0-0 line 3018
07:02:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x401, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xbb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff00}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x10c, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000080), &(0x7f00000000c0)=[0x30, 0x30, 0x60, 0x38, 0x60]}, 0x20}}, @exit_looper, @increfs={0x40046304, 0x3}, @dead_binder_done, @enter_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000140)=[0x40, 0x28]}, 0x9}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f00000001c0)=[0x30, 0x28, 0x18, 0x30, 0x48, 0x40, 0x18, 0x38]}}}, @exit_looper], 0x10, 0x0, &(0x7f0000000340)="dec5af38ae34ac0428057585b1ac9f2c"})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:31 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x4, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x9, 0x4, 0x2, 0x71, 0x81, 0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)

07:02:31 executing program 1:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x8000800000000002)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  376.835686] binder: 24214:24223 ioctl c0306201 20000240 returned -22
[  376.852584] binder: undelivered TRANSACTION_ERROR: 29201
[  376.852636] binder: binder_mmap: 24227 20ffc000-21000000 bad vm_flags failed -1
07:02:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x8000, 0x0)
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000200)={0x10001, 0x7fffffff, 0x610, 0x4, 0x28eec646, 0xffff})
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000140)='md5sum.&]mime_type--wlan1trustedmime_type-@\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fremovexattr(r1, &(0x7f0000000080)=@random={'trusted.', '/dev/binder#\x00'})
setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup3(r0, r0, 0x80000)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={<r2=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  376.916139] binder: 24236:24243 BC_FREE_BUFFER u0000000000000000 no match
[  376.924631] binder: 24240:24244 got transaction to invalid handle
[  376.950391] binder: 24240:24244 transaction failed 29201/-22, size 0-0 line 3018
[  377.004418] binder: undelivered TRANSACTION_ERROR: 29201
[  377.019122] binder: binder_mmap: 24252 20ffc000-21000000 bad vm_flags failed -1
07:02:31 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40000, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file1', [{0x20, 'dctcp-reno\x00'}, {}, {0x20, 'dctcp-reno\x00'}, {0x20, 'cpusetcgroupkeyringem0'}, {}], 0xa, "32c38be48e4441d2097b2373a663e86b4d07fea3b9a49a788c9f320f68a3242ee2deb607ea5ce32a9efa17a799da929cbe4af4a5eb362ece28def7c0a1503f13e53139cb2c699490d860efaf5e9e77b16222c66eda5e538fada94345e45d42f03288ec50e4fb4e250e"}, 0xa5)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:02:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FICLONE(r2, 0x40049409, r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82240, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x1, 0x70, 0x1f, 0x99, 0x612eb04f, 0x5, 0x0, 0x3, 0x8, 0x2, 0x6, 0x0, 0x401, 0xff, 0x40, 0x6000000000000000, 0x2, 0x0, 0x5, 0x9, 0xcc, 0x8, 0x0, 0x1c00, 0x3a, 0xdccd, 0x3b52, 0x0, 0x7efe, 0x5, 0x400, 0x8, 0x81, 0xf6, 0x3, 0xfffffffffffffffc, 0x5, 0x100000001, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x8000, 0x4, 0x1da9, 0x7, 0xa21, 0x3, 0x80})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800e2ff8b4966d016"], 0x0, 0x0, 0x0})
accept(r1, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, &(0x7f00000000c0)=0x80)

07:02:31 executing program 0:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480))
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400))
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x3ff}, 0x10)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff})
sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x7)
rename(0x0, &(0x7f0000000580)='./file0\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8)
unshare(0x60000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000000000))
sendmmsg(r0, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="e6009802b95827a0d242b77a65f6eae95efd768b7a8cf10c75bf0651005d487cdfaaafa64e800103865219011fa63f5eb5b66d5cc750deb26450f4955b072afa466c", 0x42}], 0x1}, 0x1}], 0x1, 0x0)
sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)=0x100006)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc)
creat(&(0x7f0000000200)='./file0\x00', 0x45)

07:02:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x8000)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a04000000aaaf0d9eef5a118a7a6b2c9345a672050b161ba6000000007fffffffecf0c22512813853f03ae659defce5bba12e4e85b0c4f7d7a45ce56af4291e5dd9d8b2f34a3a01dd1890d1063bb866354374c1e4845d9b7238735a786a4e3dda569310405a996451e37933fca388fd99a8955d64")
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4af5000002f3f56a47c279770d3aa447d76f7ef8b4c76e864af343e1367f7071343ef2d01ce70c0b73e12a22da3249106e40d3fd2cdb995d74a11c883ac08b47909fef30beff4977d380796576e0a414d81e4a157a38e5a21f894837e3c278a909f92dd401", @ANYRES64=0x0], 0x0, 0x0, 0x0})

[  377.097261] binder: 24273:24278 BC_FREE_BUFFER u0000000000000000 no match
[  377.109730] binder: 24275:24280 unknown command -1966072
[  377.125645] binder: 24275:24280 ioctl c0306201 20000300 returned -22
[  377.168364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22713 sclass=netlink_route_socket pig=24291 comm=syz-executor.0
[  377.178237] binder: 24292:24293 unknown command 62794
[  377.197271] binder: 24292:24293 ioctl c0306201 20000240 returned -22
[  377.437507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22713 sclass=netlink_route_socket pig=24309 comm=syz-executor.0
07:02:32 executing program 4:
clone(0x803fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$TIOCEXCL(r0, 0x540c)

07:02:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000280)={0x3f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'wlc\x00', 0x10, 0x10001, 0x13}, 0x2c)
ppoll(&(0x7f0000000080)=[{r0, 0xc}, {r0, 0x4028}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={0x4}, 0x8)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="aa4abf86b9db27fc3cdd588109881851166be6584340589f4ce0619bbd977a82d55c302a37864980857735a0419b2930fcdc3b4d4ac531b5ab6de6d43e8b57d6b9fedeef7b62f783745123ffa4f51109f42486e0857e26f8497f95904dcc72565e56d2769185f228f21171d7d517e322155e01e3abbf6fa1c1cf4907a3d5b9668b6ad9bcf3916c1119c3b59b4e71bbd8f906cc1dad5ae04d00000000"], 0x0, 0x0, 0x0})
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8)

07:02:32 executing program 3:
socketpair(0x5, 0x806, 0x6, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:32 executing program 2:
mknod$loop(&(0x7f0000000040)='./file1\x00', 0xa, 0x1)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prctl$PR_SET_FP_MODE(0x2d, 0x1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x8, 0x4)

07:02:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = inotify_init()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x80404, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x48, 0xae, &(0x7f0000000080)="8e8557c03f527566b279b9e0579e1eaf788f2e3f08a3d5afc937a595427fdd455279dbc3c5871c36b4a0abb37cb21bf2e1a9e0f0b85c737abfec1ad26bda5225ca4280480d3910e9", &(0x7f0000000140)=""/174, 0x7f}, 0x28)
r5 = fcntl$getown(r1, 0x9)
lstat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
tgkill(r5, r5, 0x13)
getgroups(0x1, &(0x7f0000001080)=[<r7=>0xee01])
r8 = gettid()
r9 = geteuid()
getgroups(0x3, &(0x7f00000010c0)=[0xee00, <r10=>0xffffffffffffffff, 0xffffffffffffffff])
fcntl$getownex(r1, 0x10, &(0x7f0000002640)={0x0, <r11=>0x0})
r12 = getuid()
r13 = getgid()
sendmmsg$unix(r4, &(0x7f00000026c0)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000300)="33517a8f06a5870dd9fcc1ef691e80e466ae3df0c7d9d6a193b61130d4685aee13623974072e502c1522f5acd2f1a2cb4e12888fb249962fe98dd5330c2c6f21fa7e82407b711cd3d37a85376bf388fc4822b7b4e279509696dd15710c2a0f91fd6276875cce8e323ad8ce7cd22deb7f5cf23b", 0x73}, {&(0x7f0000000380)="aa9868b54fdfb271c01db7375d5c9ea7dd671d8f31478fa1c401fd4e9ec77cdb08e09cb7b9a080047960e3a713bbe277771fa0e02af416b456f3500dacd503e32afdcb04167bf93007a64fb25cc0cc02a426a5860c401eb9813a021cbc3a38a8dc", 0x61}, {&(0x7f0000000400)="d9a4b5fad914b456071bbd065d2026de33aca026bbf4a255853234b9a7e99aa5378e5b42fdfb7fa2895c148d65aa4bb8984b9f3e72088e07f053fe270976583eb8624da099f4d4088db2e8da957cd81d187f6e3d3c9d436c6949359c34bfc38aa8a8fdaba384676b861dc8bee3176a6ded1bada6c5d107f8b6b56405e27688f970b17b793ff36e909e0cf11dfd9aaab04d676a1584bbe2a2ef2af06a7e3339c78bd960282a1aafc18c42e42ac6d46ecc34c4c5e43e295d5516645b803765f49f505c3869acd5e0", 0xc7}, {&(0x7f0000000000)="a675032adbec4a88b09e12f758b54951d03588e4a78707f6f83c55be67c3da21d40ddbd971970a1f9c3de047ee4cfb", 0x2f}, {&(0x7f0000000500)="c3e3791becbfbad89ad9d921cb35ca66e8e4106577a2db5b8f1c93929b5a9498ca23a8", 0x23}, {&(0x7f0000000540)="4c4bd937a7be4767dc15aa5f460d1ff67b751568d6d1c7539f94d672e35ca25a814efc0dd1b290452836deb089e30316da091b510fb9e9125a22f39c4986a0bf56c1e3839c22b63c8f473a588723eea05e89af0261f6028d32337746db3fa92d86211af9228188bd5aeb13bc724ae9dad0fb5ea6a2ab8166e5c8be9150bce121cfc404971e1b17f658409794552e745dca02f4782d38503e8b7b59af62430040f0350639a8e09691d678530adf79d7bb50c165f5f797a29ba9f60b9a07f05d56b2c0300f59ce3da6205e68c3bc7603d924e4bbb2b0a3c519837fa6448ec077bd905d5a977e4ba8", 0xe7}], 0x6, 0x0, 0x0, 0x1}, {&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000740)="4810d247849cc905f7a754bc72c3a74e7ed10cb76a03d3372b9ba23f294453934a4a061275645c891827821b651b3291945544ba7cf8f09cc0130289ff298eedc8ed04a36d786287b911b41dd0a717d5a618b843197b7c3241e511b586d82154eaf63631d5fdbfb149e35b852ea4ea53161b97dec3ff748b496bf929a90013d586e564626bfb2bac367a69f033ae305e69407b4497ae683b505f0b62470487654c928c005a1ffdd771096d875ce4b35618fc6e92c41d4f5fade7b6060d315e95fa97b8eedc04502b52358fb4d48696a393b8a691b64b5558c86c377c12b148f82d119e91a18b474f", 0xe8}, {&(0x7f0000000840)="fe6b733ce5aa4349531410c2843ca1cf86b8ec95af041ac8877f7fc2079be50d53b986e0a78ebe14fc2270e651b596b94c14280df91eb35af05ff10aca2f67f061a7ed1e75685826df840d6e7b25", 0x4e}, {&(0x7f00000008c0)="09b2171cd7b718273397e5af5798aedc6320f5c3b82fd6e9b4d2ef056215a0d0b16343716a3fe3dceb5c8f637f8dbf485c4520893000a09677e31cb62cbef8c35c006c3df2abf209c220a1ce0c986807fb5c9158febdc315eb4fff41873f96baffec9742b98c34188e1d4f289111428ffe6abbc4f494cce5887d0d9e35fbb970e853e741884c74b56d03c77ce5cf02af288fba1bf0e5aa756127ed2afb4d9435568007fc895b7738e1722c77278c70cf9a2ec93f516ea833e7d0ffa51a67f7c72ba4c37b71259df9b557", 0xca}, {&(0x7f00000009c0)="71a7082e988227857c6ed367f9567e575c4b034b51287b5085caaf0413cd3c0476c7c8a5e365b3197d1b1dacd5f5e4ee1323a2114bb337f9e7ff6a6e44842b0c82b09f49545ab1aef942f89adefa6110d5724604db083ed48a765a857dd7e7acb7d1139459b1c14276f74ddfbf94bbfe22cde98db0", 0x75}, {&(0x7f0000000a40)="371316fbd46c35ddafda5ede8f91009236656e02b2bd62e20f2167318a4a5a460360318d4ed7b8523c5d666217c13e5b72d04e930a50900ea3c7c86820bea5ba2bc5a1e2472f57819081e815d3a6fd5c202a37b4e28f11e8def9abaf3c644000554716718cd423a4643ec7e386df713d05a00ee64aae7cd633efb8d4219315d1de6e0353e5a771af88ef54acdffbdc78dfb8611605b6beea2b77b53a8d2e7dbe3e6b4ad7b725a8b4e6102089e2f4bb33f71780fa596b95a93cf2da7aeedc92c4b80fbca9f42559e63d128f154e305e7b423b13", 0xd3}, {&(0x7f0000000b40)="c0cddc09688cde045fcc7781c2775de595471e292bcce48397fce98799cb6bcf8d7e6603e63ca152d0759c67573fea89c323ef8374d6ab2641c3f9169723694f928be679e310f6ab69b8ab5e9906e76214fb90ec8587274e02891ced14047d5339cef30d0fc9a5882b7e3e4ebcab236ed01dcdeb230d88a9efa65bc23d85fefd5c157a54dee8821099a94f29ed5855b19ba951e5f508419563fec46a336670ce5c633a1f3eb47bc998fe721d2e2c3573408d18c2ee228fe588aa9ec3f6816083dc6d68f9d7a7932084", 0xc9}, {&(0x7f0000000c40)="2665dd819c8eecdaa044f4a81f6269b4cc71c5e120f6481c67a091df7e17aa2ff8f326d09322190b8c08432d2d006debf68da99a40c1de053e33d9c9a183183bf16b8c343f3275e438010f0589db3a4ae9bbcedb3cf19321747cf460d41dc6988bac99a8d403462ea9c9a1546c4e90ba142d34ce78d7479295c08ae31f28c36485dca8955c153b86c2386aa75963fba3f877014972", 0x95}, {&(0x7f0000000d00)="f0609065228d00777292dc6500f1a007a1687b67caa2768b2e7b3fdf6df3eab678d4e6f37d26b971bd11f134db0cefd8326d7a83a3d00ebe2c9f15b893abcbb8167f529bdb665ef5f8813d282198c0a1815576ba240acec0b0397dc681e355e12a0ee135a0b37040a53eb0b8046def500eaa4d917da453244908f4ef6a7a87988adca935a974aa80255945e886843410ffee7f021d83b8b91643a2a3a7c612d1e0ae9c59ff0b6f713edb341a49c8b032b11d2eb641813b7952f6224b1f6aaa2a1fc52f8cc4c8478422a0e077902302b3ab5671b093cb34", 0xd7}, {&(0x7f0000000e00)="182f5110f620a998a53419245d4d6308538eb5b5e9d6a7e3f1e85e6163d6dfb6a56963381ea312a13cca73d0e5bd1b555c9690901399a3d5e427620b149a43de6269e366f5864342ba4bdc670acdcb180403025c765f8d24fa27b7773d5195276184bfc185d3e82819e33b4e2ea7c4130129b3249750403dcd5525f85373fa75d577f715a5cf6b27dda23862598a6bd4a74de34ecf78efb3b8d1dbfb76adc5a43b0dcd7fc1cd3990bbe63accce407c9fb99098bb607ca0cc710c336edfdde69527a14bc1a472c57bb718008fa0e6e64bb6e231bf8900f46f9424039dcf66f29f5f1188b1c1", 0xe5}], 0x9, &(0x7f0000001100)=ANY=[@ANYBLOB="28000000000000000196159c71a5289d", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x20000000}, {&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001200)="1efa00e77dda4aee0b1f170719507adbc22d3dbdbd99fb47480b53d0734636f227", 0x21}, {&(0x7f0000001240)="741321fb88b1d0a3efe22670c605d6dbd568971c4737e68fa845afee8706abb31540ce04484cd6a736f7956d34bfb6d91719bd57f43ab3135eb6498afae091574d3b637376fcf2674d729164d75e24be493a0c6325c83b36db23ce5051", 0x5d}, {&(0x7f00000012c0)="38c586a1b40fd5a434d874dd75a4a25764", 0x11}, {&(0x7f0000001300)="d032", 0x2}, {&(0x7f0000001340)="573252606ad31fe23861a4d027184918c39aada26d3cd00986a2e93f57d43e527380f81171dd5d5d72643cfc31c545c5dfa4f84f300f27ec5cffc66d453937ee14a8f0ef4b64b8094f46033d1cd5af6a8eed323e6f5961c2bc8ad65dde8749c984797036855f0bd847644a3e36f619b14bf7ba85274d8f9d33c42096ef10ff657bb451bb78d3a620f6b89f5aea481d44442bf40d7d7c5ced0426ba9f5d95f705fbf7c0b3a46840be3c5d1d5f89f2326b0f4f7cb9a00baeb672b72e91", 0xbc}, {&(0x7f0000001400)="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", 0x1000}], 0x6, 0x0, 0x0, 0x200008d0}, {&(0x7f0000002480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002500)="caefbb650b7661bc5ba8d36abe95022841213f654c7940292e9188460c6f620349cb34919c3dc98a124465b676f333c98c0c8005ac", 0x35}, {&(0x7f0000002540)="09299008f67bda15cc9a0ea566b4e7498b14136757668dd33bd3", 0x1a}, {&(0x7f0000002580)="613d6c03b65671a31595b0282d7baa324706a1a52ed522284d51475a349f7c9aa2a17127ebfe5ebee3847417d1e3a99fa0d0b05e4ce360f9505268766745b727a39b24b44abc56beaafb053d8ff1c29054598398275d694a397f987876f4db582d1ae8845ab433", 0x67}], 0x3, &(0x7f0000002680)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x20, 0x50}], 0x4, 0x4000044)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
waitid(0x2, r5, &(0x7f00000027c0), 0x20000008, &(0x7f0000002840))
socket$inet6(0xa, 0x5, 0x400)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100012, r0, 0x0)

07:02:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
getpriority(0x3, r1)

07:02:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r1=>0x0, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f0000000080)='/bdevvmnet0keyring\x00', 0xffffffffffffffff}, 0x30)
ptrace$pokeuser(0x6, r1, 0x5, 0x20)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  377.776427] binder: 24319:24322 unknown command -2034283862
[  377.793067] binder: 24319:24322 ioctl c0306201 20000300 returned -22
07:02:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0x0)

07:02:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  377.827066] binder: 24320:24328 BC_FREE_BUFFER u0000000000000000 no match
[  377.837562] binder: 24319:24336 unknown command -2034283862
[  377.845774] binder: 24319:24336 ioctl c0306201 20000300 returned -22
07:02:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000001c0)={0x3, 0x7, 0x5})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x900, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})

07:02:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getrusage(0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
write$binfmt_aout(r1, &(0x7f0000000340)={{0x10b, 0x5, 0x8157, 0x92, 0x2f2, 0x7, 0x195, 0x101}, "9287b17b3ee53d78640dc2c7def34d63a532cf742e78690e5bcb6b602b50ef52fe743b69b5404c86a3a9c0dc8e70540cd9995f01cf2c83b5fa04bc8fe83504f39c4cce575d25791b0933df0c9d2f004fcc5fad0c75f06d128ae31562a6563f13f1b7387c3516c8b1c57f53b9d734cc79ab4734e50032c5328261c118368926c827797edd63919fa34d92c383650a053c7adcf59e84486fddb4d7a27d65cfae75db45cc11688579a95b569d1e41863103deb732b051bf5e31a97d297bbb12e60ae089fe995f490f58fb27eb9217df118cb5b74a1f56c91642cfb8fae63935172903ac9f269d27c922fb35f67fe1ab62ba519a43fd9a2c07c68a187e43c2ad59f2dab9e1796113ff86f1c87a6e76f7be19065f39fc453d4850cf4e2fb1567fca36010238f5fc8e30ea99a5323b76f352c16c380401b1b1dd5c75b40b694086f60f6adc08c172c51e0da1af83d922dcfddcf1f9bb800ca0d0aa2539d628c0630cad59afa96d922fcc950ec6c16ee3b0de585a07221ed5796f67fea5e0ee776eaf4f4e07775f1c877b46b7f997615ad1b357c403b5cc2729c3554ebb7898c2f062dbf578bae51966b735edcc3a9901d920ee75803bde1b5daaff8ae0d5c4168b06c7942c84a407b01630a83b021ba3ad2358e1b6a1e2c95795863ca6e65b34d8af5b94588c0385e133afffc2495af853f9ccc5521d5aff972e953fa98fd6cd0f926445e4a2b5800d9c93c15a31220a04e832a109606d728a2ed1d0e6e3638dc659ae43472260bfdd531f747c5c2abf8ffdbdc56ae6e48f1689372f5443eb6ef1db1d3d1d36a35716a041c286c2d85c33c31f9c8de92e578cb642efde716beeb9cd9063a374fa66491935b8e701b51b0dc6b2df2823d8e5fb3d28607927edbfd302ddcc9671d85f21001311be816e5fcb7b88e8ae09478c9f3d754b74897f975ec450a3935b12f2a045cd892ec815c7c2402e3ba38530d587784119032ee1ef40ec11a6adfc70f5e30f6f7edd9aadf9e305b10ec81185d6cce29892695339a5ca764bd25f93057369fbe318002a4c663a152a388af6114cf5bee886a140af29a7c8d512926386e0784089ecddc7d15dff13701c7794f474de3e4610ead6ed35f10fc9bca0a3c0b782e329f9bc79fa439f530e658d667829d52022d86f63955fd7b900696590840b5838846d25d42597d1ab2cb8811ad0d05fdd2a5a40ca8485b6269dd87e064b415612a70a6a4de762add3d4ef9c9fba37ae9ae883e8995734e644c8b4171e1f6716e6d7ce93b59de011946e15d197228a3c7d75c71c28c1f456dae565f16f7b0daaacdf24ce4eac5c943ab6495f1467b2c24b6a0660568879d47099dde4101760a21d8608db721291ce994718c8ccd1ea644b0d145ecb111ba83354b986282e0d52139a912acbae0b58213b4f872cba2e37be4a9f9198ec3dc8160aa2f26f1077032aacb4c13b41894a963d554d707fe38a78ca6ac1a2de5c63c6a79da01b9ca48a0fe6811306799b5849f07f5d826c174c0920cfdf17aed3f3fae766f291ec595d8420e522c95ce959a37e5287bf8f1b39ee782efdfba2342936f0105a369add6cf29e858b63d4896ee8c8a739ec79d57028e38eedcedaaebc5b161b12fc5f988ace0e65e01259e731a30a339bfbad36f04e152c117e248fbc2fd18c4b74ef382a7d40fc8af585f5b87577724e1fc707c4ed9cbd953a3d6629259e59be5a7ab1cbf803510715719640874fc201bdf5139eca7dff2fc831e594ab66de8aa12bf2ea775ccc96cd2bdc97311b02c2cdb5ce4ac85e0e1baa620dd0a8c5cfaa9a1e5a7304487867a760af7df751ad27234498ef4544b0e3a22a82755b3ceb51be6662f3f9f6a7056e9bc26114d470ae25f2698722a250d44cac4412a41c501362f6d513302220fa2c7ee8e81d32715d03dde118450bc126d1f303b12eb610b60da0085bc3da55f6ce59a1489a5268a54eaa791cb203895b7998c59837a5684af9a3fbb99921a007e7127901cac1a4828a2635b8ada67dc9767230a0320c6fc41f07066f75bb3b003716f53ae8e852a71c444e1555d780c60e7b3b1b554df67999611e1a6cf8060a7d9dea39fe143af97892284bb47cebeb5f4a57db083b67e121240cfa759911b5cda9427a03c13776ac2b6870603f79f457c281b77c970c723ddb607a29ec2d5cc806f74786f225e3124ce1a5dd0ba8cfef20341f17d536bd3f84e7b5754e1f22f534f91cbd7405b722a8caae000e5573178a44f5b5ce5a99dc32447c21b4cc1b835805654df3a37ccd912d945dcfb3b9e66946fef2c025e06e7be10cc4facdfc685a3d99ef83038136f12a80262e9cf7d42bbd67ef37f38341f3348903331790d515f10f88b702eab711f005da6901b8b5ba0574e931b4356ee383b9d893c847255fcbd41e85932f543a40f4e7a3b837a36c402b2bf9428941fab041b4da63e49b97e924e3fc87e2f36fd146fefae6d5e52c59465019263758101cf75a195cfe44467cfbe53bd6628f57155a10a2aa8fd95c65724c8f0dac65e556e6b15cc96f794c7af72fefe52c3a449f4d17e682679a2e301ce6e0b07f5ec418d9a92f13be408660bb6fdad6f3b35322b233757de853dac8a5829bffa6e31593420bcca4229ef3217610b890284eaa7d0cda30d0777d9028ad2a1d9e3d9a280431ddd6365a1996e63e4fa0e74925066a265075dd6f27ead099d6dad5c1e798e42477cd330a93978cd23b60e51976ab7b572b5308633c1927952cd9ca65e08d242027fa632d369da322a75b8fb71250fcc9c59ab99a3a2910fa8a2f3ba1cf5c9604ce3d99879044b4da7e939f9133bb1663453d36dd7d612f21c94c468086ef296b689e01cee75e2d2407f49cb15d8dc9ca9dd7e2d37074e6af085500f66a95c78a154ba3e2a6ce974e5a9f3729f1b4fbabbe3222d7eab468cf4526697f8d585e0b461ef1000484682e3121d929118610cc55941a7209986169f7d6bbf718c04e984b442a4b929554cb66ba12abd24c86f38184c0fce520ab9e0d1d2bcd03ae25a6f9088d987d75d8afa04f01b18a7bcee23d86a5267b4db6fd13865e27cd0cbce0747097d3a321078d0edb92f86ab247e532cc414a95d78c42a095f9c24bba279d0cf86f8bbc417f7589d05598f60e2182efdab44a967d9c95e2cd3bfe33f35dc1c3929722f477c2007e8eb07193f9dcbc326b346eb24daba4117117e18568441a965ccd0cf26e71b8d9cb36fe9276f403d46957b789ecd31755bc290b95e047a15e661e08323b4905349b845431aa8aae2ece83464ee6fac2489d287923a1f6af862216be6fd4d94ccbcc085cef5f9f5c052cf3d62c5dcab8485858313a2e7e6ae6b2925fb8869446a5ce394a4f2d1a5f3af6d403a7f707a15b74667790283237504bf33a495f17db8df2496511a2fc3d8d7c6f27c6ae91be8f50cf5f76a35577125044e6acdb0925d7e979127befbfef55f258eaad6cc689290d82760efdf452b1d7efdf3eb64d9dfb30bd476dc8c602cddc70ed1ce4efa992280df0c1fb40fe582635cde07dbbec36ca1661049d1aae36a102be0dc41098da534f980a781e548a6675c8053e1fe604f78a8d8c01c0706e9fc00a2519049d91a330178bb6971bfe38978d552c0f7a72e5743c5b91aa0d3c180058314336d334703d53b0c8af59ecc755138a03c07855e72f5b343a053bedbdff941f9ef5a298124d8e4b18cb08fb07fada355a81d2ade409b6bf03f91b41c88503d39e359c9ba5c4a3e016b830abddd87ad23e466240929e572c8bd4f0697322deefb12f5c01f672d7be70ae425b7e7c74ac2edcc3df687ae1e6866fab0c2dc24e7f0d4500fc93e192d2ca880a33803dea8002372d443bb854c294f175d772d3d400ea555aba26fdc0f6936fc00a5b74ed62f4938ff993da986c90dd7d84fd4cb01b977bce7295f2e46ec17e8e1ecd75a5e014521e746d4bba4a525d5020cbb00a9f9281c07bfdbad648b49ecc69dd2b7c4ba48f8e6de63c2725ad3886f6b2822d0bf2c2f248aee3a730b8526d9fd33af5d0f343b462e5e1d14d8d85e1c42136076135a7d2ea6dc9b4c479559b98bbc9f2039056ce6ecf10df053f1ca07152bf84c70872d78ed7f09e9706a5578260d1b83f1da3693820f9f64e6bc5e6ff2e232660cc018eff680cc1f9223b5a12803192b2c8fefb29095362375dccb46f4e55a9d276e7251b389ab40f64f0565e9f8c7ad41354eacf36de30bfed29c2000883e4e288a393a2aab3497df5cc41c0cbad1c3418c5e24d048b0f63f2d0fc3c7a823a9bf4b322e0c9f2503bc108efcdc9e3f88c24bd52b8eca76ed42db0d38077b72211a69d7c2cf6e35ab73fa40f2710abefc1ed2f7df03945289f0eb66ba8d9cb47613a4e21b77bd7fd2265ac91ad2b8063abc7def8bd5f10e8454a67890fa29147bae18c1e07b27dec496be10f473ae93b46811babc975fb56b684eac33b58c5ef0c072de8729fe79c969c5b1ad808e015b0d783e5bc02134b304114e16f83b902fb75f1d8d97574a9befdc4b1ae5441ae29214457762ec440fcff5e281712145030a86a960d76989e7b0266c7bc6a288a045349950a25ee5ab80980321fe4a360190aaff08f94dabf46781dd4a0d882552329eae4264002e0d552e536b4e3a99cce6375c7d9c0db497f12352b7bb9ee2e6978b7928b5aaad8d6ab6d141c8f186206d125b9e6997e7a385c37e454be61372549d4e2b8e44ba6eea9b47b81fbe5acd91748eaa3eefa3bbb0ecfc1c61cc72d3bf4c948b49113438dffe2308ef9dc9bfb2695508db0437ea9c3d885568447715b0c00018b536cc83ea7bc02daf84488cdc84197a9844b430a545053a166d510939b969aceafc60c49cf2351cd5b36eb0772c9cb939faa440483afb3b4a9788af63e2953bdbb46c23743df88d2e45ca3e3d0f32fc440e388b9519bf6e3e10417e08776d9661e569dde97a2d71a7ceef093762bd86cfac485615d600292f09ce27dbd74e810898a282a0b5e1c02c4ffe32224b8e94c3201fc0310adf8b6e5755b65cc5e9ed02c2213a74cc6a57ad062c0a5519dd3cb260fba3dc602cbb4a90aed765abcf5efc4ca3e67621f38ecd7a344c0c9dd768c6c2ec99bbbea75462f171ac49ff996ee2ffd5d2e8c0a0b3b49576321ee17aa11a7e14f0595efb0fa72f268c0b8794d3d351e18ac5a9759fc0ea75918f9882cf86fad2407e3b6e41386e70676fd4531d0efaceb51c0c0f92d6cad364ae2bc4d15a6ace872f560d07d4dbfe1b2e56b872aa387ef8e6b0cbe5646f1326b835c31053ba8902e195327c2bb20a324ff7cbda4bf96990da315d64fa8d0101f0e70e9784dbbec3a39b27be0fa919fc7165be7db8045f4c7753fd0864cf297586e954d5d85334926eebd0c7144722804677b2f181073fefb6139c40acb35a603d0636c1569cb9d150e148210a25b6714efe6a7f8b980c7c3bdf921af580924f7264b4c89ca8310b68536bf106e2dc66daaad04b68f4c031b80f19f59efcbe67d3966d356ca797d6f64b786c42a78c1dbd981a304bb80b7fb72aa0c3f12d5f93ae6715fe7bbb05774e43eeb175e46cda3eddb411043159ccdbc5e38e0f832c11dbee7e920ca2b68f920828616f49ae92b142b71de29e93ae85526efca59e8ba084836f9376e2231b267f163439eb84c3f6b84e8847104e737ea1b2e200744ee6b66962641ef02a0ed5df7b63c24b963abb5a83e983e5a04bc5d8b7fd616e6981190e2ef8785c44a777629f47afed6e8d681c15309a4476a8d06778ff1cde855f9f796406ffb", [[]]}, 0x1120)

[  377.939980] binder: 24348:24352 BC_FREE_BUFFER u0000000000000000 no match
[  377.944089] binder: 24350:24355 got transaction to invalid handle
[  377.988682] binder: 24350:24355 transaction failed 29201/-22, size 0-0 line 3018
[  378.011975] binder: undelivered TRANSACTION_ERROR: 29201
07:02:33 executing program 4:
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='oom_adj\x00'}, 0x10)
r1 = fcntl$getown(r0, 0x9)
sched_getparam(r1, &(0x7f0000000140))
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x800, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000001c0)=0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100))
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r3, r3, 0x0, 0x3)
timer_create(0x0, &(0x7f0000001240)={0x0, 0x3c, 0x5, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="ff5a24ef8b79413a3a4bd8c495244aece5d08183ac873b544a14a54835a606024cb95f99bdee2ec1e14c6cab9605b3e1"}}, &(0x7f0000001280))

07:02:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockname(0xffffffffffffff9c, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000004c0)=0x80)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r2, 0x0, 0x70bd26, 0x9, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="329408875044e640", @ANYRES64=0x0], 0x0, 0x0, 0x0})
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x43, "e659689d2a6ea88ded4ed063f46450a021548f244e8aae70f725be3fbb973c2402a3c62f3747ddf08b20688a2f1ab9837124659ff734407c1f091082d6d8521cc59c74"}, &(0x7f00000001c0)=0x67)
set_thread_area(&(0x7f0000000080)={0x9360, 0xffffffffffffffff, 0x2000, 0x7, 0xfffffffffffff801, 0x20, 0x4, 0x6, 0xffffffffffffffe1, 0x9})

07:02:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc)

07:02:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11633e404b3a86e26b0e5bd513f2ad1caafa36b88c4f14c879a884cf4b31b2dcd837ff79de21ca360a315627eb1e1279ad4cc91475bd7efd3e5fb54a004c53f7db6124b1fa17b9931c2bc2bba30697816468ad3f0cb058b832a567f813f6601755d6181e285af4042cbdd06d57bcd842bf3c18bf79eed0d8052062bcc2a9728196732f5586ce8b49c1ee71e9f7d145c8977c5732950bcaedcf2fb4070ebaecb1986715eedb5461ad"], 0x0, 0x0, 0x0})

07:02:33 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

07:02:33 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20340, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1)

[  378.663085] binder: 24369:24374 unknown command -2029480910
[  378.669291] binder: 24372:24378 unknown command 1077830417
[  378.670790] binder: 24369:24374 ioctl c0306201 20000240 returned -22
[  378.682948] binder: 24372:24378 ioctl c0306201 20000300 returned -22
[  378.692662] binder: binder_mmap: 24367 20ffc000-21000000 bad vm_flags failed -1
07:02:33 executing program 4:
clone(0x8c0100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='ef\x13\xcfm\xae\x94\x18\xa2\xbe\xfc\x80\x00\x00\x00\x8d\x1cc\x97i\x88tE\b\x00\xe7\x9az\xf4\xa9-#\xb4i:\r')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clock_adjtime(0x3, &(0x7f0000000140)={0x5, 0x7, 0x7fffffff, 0xdb71, 0x3, 0x9, 0x7, 0x76, 0x3, 0xe9, 0x2, 0xffffffffa5c48f76, 0xffffffff80000001, 0x7fffffff, 0x80000001, 0xfff, 0x2, 0x9, 0x0, 0x3, 0x9fea, 0xfffffffffffffffb, 0x5, 0x9, 0x9, 0x7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, &(0x7f0000000000), r1, &(0x7f0000000080), 0x2, 0x1)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x2, 0x0)
ioctl$KDADDIO(r2, 0x4b34, 0x81)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)
r3 = getuid()
setuid(r3)

[  378.715946] binder: 24369:24374 unknown command -2029480910
[  378.744973] binder: 24369:24374 ioctl c0306201 20000240 returned -22
07:02:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=<r1=>0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x40}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}, {@fsname={'fsname', 0x3d, '/dev/binder#\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@obj_user={'obj_user', 0x3d, '--nodev].'}}]})
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x300, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x64f5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0})
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000380)={0x3, 0x28, "b0fee4dd01d6233a8f924b75e183eee542b3d941206c0cd18fa7c450796ba4bb60cda3eaa255714e"})

07:02:33 executing program 0:
r0 = syz_open_pts(0xffffffffffffff9c, 0x800)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4)
r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000040)=0x8, 0x4)
r4 = fcntl$dupfd(r2, 0x406, r2)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x1, 0x4, 0x71, 0x1, 0x9, 0xfffffffeffffffff, 0x4, 0x2, 0x1, 0x10001, 0x6, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000002, 0x100050, r1, 0x0)

07:02:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = geteuid()
r5 = geteuid()
getgroups(0x9, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, <r6=>0xee00, 0xee01])
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getresgid(&(0x7f0000000300), &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000380))
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x3, r2}, {0x2, 0x3, r3}, {0x2, 0x1, r4}, {0x2, 0x1, r5}], {0x4, 0x5}, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x0, r8}], {}, {0x20, 0x4}}, 0x5c, 0x1)
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)

[  378.782064] binder: 24392:24396 got transaction to invalid handle
[  378.793689] binder: binder_mmap: 24394 20ffc000-21000000 bad vm_flags failed -1
[  378.806791] binder: 24392:24396 transaction failed 29201/-22, size 0-0 line 3018
07:02:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  378.857261] binder: undelivered TRANSACTION_ERROR: 29201
07:02:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r1, &(0x7f0000001380)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/143, 0x8f}, {&(0x7f0000000080)=""/64, 0x40}], 0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000400210)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100012, r0, 0x0)

07:02:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x2, &(0x7f0000000080)="49f8cb692417530b8c3c694b98a288bd68d8883c72e10cd9c1673f5645885130b024c7c97649365c6ef1c1a13da1420186ff4fc739c334714135436241fbe947c3d59aa0ceeff26619ff39402f73df8dbe8bf9277af3bf16480f743aeb34741b77559e14c17281357ca7717ab0d256974beecfbdefabbaaf7a89b3c4b934d886effb")
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  378.908710] binder: 24406:24414 BC_FREE_BUFFER u0000000000000000 no match
[  378.948499] binder: 24410:24415 got transaction to invalid handle
07:02:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt(r1, 0x80000000, 0x1, &(0x7f0000000080)="199cd922137ef63856b66655ac0baab787b04e8d8373ba764e011549eda0cb17f32fdfb91ad4b18e000df921a5064adb397a771eedb7be6ff7729e43642ba7c2b09def532d99f08111b144851af8f943283149578b9533de9030c6eb", 0x5c)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116309000000700d558bb53aff0595a6d164"], 0x0, 0x0, 0x0})

[  378.958731] binder: 24410:24415 transaction failed 29201/-22, size 0-0 line 3018
[  378.959652] binder: 24406:24422 BC_FREE_BUFFER u0000000000000000 no match
[  378.982807] binder: undelivered TRANSACTION_ERROR: 29201
07:02:33 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x200000044, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

07:02:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000000000004001000000000000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccc763e1000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002e00000020200000000000000ac1414bbffffffffff000000ffffffffffffffffffff00000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000ff0000ff00ff00000000000000000000000400400003000000000005687372300000000000000000000000006970366772657461703000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0101e00000020f00000001000000000000027f000001ffffffffffffffff00000000000000000000000000000000000000000000000000ffffffffff00000000000000000000000000000000000000000000000000000000000000000000ffff00ffffff0000000000000000000000090fcc920600040000000376657468315f746f5f626f6e6400000069706464703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000aaaaaaaaaa1e00000000000000000000ac1414bbac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x3)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  379.029032] binder: binder_mmap: 24420 20ffc000-21000000 bad vm_flags failed -1
[  379.035113] binder: 24426:24428 unknown command 615185
[  379.042388] binder: 24426:24428 ioctl c0306201 20000300 returned -22
07:02:34 executing program 4:
clone(0x804, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8)
syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="467cfa5d282911991e498fc8b3bf145350c3bb6fbe991fdb60d032c654c8b6ae30690780400a6110e517dc97bd4af9e02ec6e463d37a40c814737c3ba462c0888786e0abebfd1fa7828fa402567de09c3d117d215d114ce6ccea6c72ec5c282de692ed796ca59b", 0x67, 0x8000}], 0x20008, &(0x7f0000000440)=ANY=[@ANYBLOB="6772706a71756f74613d73656c66766d6e6574315d6c6f637075736574f5212c71756f74612c64697361626c655f726f6c6c5f666f72776172642c6673757569643d367e7f00347d3f752def8f66642d637377392d633f00652d307f7b37333900772c7063723d30303030303030303030303030303030303030352c666f776e65723d", @ANYRESDEC=r1, @ANYBLOB="2c616973652c646f6e745f6d6561137572652c7569643c", @ANYRESDEC=r2, @ANYBLOB=',\x00'])
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1b)

07:02:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})
pipe2$9p(&(0x7f0000000140), 0x84800)

07:02:34 executing program 1:
r0 = dup(0xffffffffffffff9c)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xfebe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd8fe4e17e2fdfacfb00000000b8b89bbe2109a8c06ccf00"], 0x0, 0x0, 0x0})

07:02:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8, &(0x7f00000000c0)="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")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:34 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
io_setup(0x2, &(0x7f0000000040)=<r0=>0x0)
io_destroy(r0)
clone(0x88080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup(0xffffffffffffff9c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

07:02:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x20400, 0x64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:34 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116613f741"], 0x0, 0x0, 0x0})

[  379.649931] binder: 24459:24462 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  379.658656] binder: 24459:24462 got reply transaction with no transaction stack
[  379.671590] binder: 24460:24467 unknown command -505114627
[  379.677367] binder: 24460:24467 ioctl c0306201 20000300 returned -22
[  379.679985] binder: 24459:24462 transaction failed 29201/-71, size 40-40 line 2926
[  379.725617] binder: 24475:24478 unknown command -149723631
[  379.731698] binder: 24475:24478 ioctl c0306201 20000000 returned -22
07:02:34 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r2, r2, 0x0, 0xad)

07:02:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})
pipe2$9p(&(0x7f0000000140), 0x84800)

07:02:34 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8)
fallocate(r2, 0x0, 0xffffffffffffffff, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
fdatasync(r0)

07:02:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl(r0, 0x8, &(0x7f0000000080)="6d66d5a0e14cda7628f76f66919556a1a0babdf7a41b59369874c060f82b220f8040549d46a8c8d4f73988ab24e394ad629bfb940d3abf2eb57f1d650754046390470fe679757732c485f9df2067837781b01bdeb471a2f7c8918d14279be1c1371b6cb622fa8ca483fb4e825b1bd6edb8589e6ddb3996400ac394354d69d5eebf8c6ab13e449532aa58379761b4585f2c")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

[  379.804581] binder: binder_mmap: 24420 20ffc000-21000000 bad vm_flags failed -1
07:02:34 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r2, r2, 0x0, 0xad)

[  379.856154] binder: 24494:24498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  379.876072] binder: 24493:24499 unknown command 0
[  379.886972] binder: 24493:24499 ioctl c0306201 20000300 returned -22
[  379.895210] binder: 24494:24498 got reply transaction with no transaction stack
[  379.907903] binder: 24494:24498 transaction failed 29201/-71, size 40-40 line 2926
07:02:35 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xa1abea1c9ba8e5fd)

07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r2, r2, 0x0, 0xad)

07:02:35 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000140)=""/133, &(0x7f0000000040)=0x85)

07:02:35 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
syncfs(r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00')
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2200, 0x0)
ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000003c0)=0x10000)
write$P9_RVERSION(r4, &(0x7f00000004c0)={0x15, 0x65, 0xffff, 0xfff, 0x8, '9P2000.L'}, 0x15)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000240))
mkdirat$cgroup(r1, &(0x7f0000000400)='syz1\x00', 0x1ff)
timerfd_create(0x0, 0x800)
fsetxattr(r5, &(0x7f0000000440)=@random={'security.', '/\x00'}, &(0x7f0000000480)='syz1\x00', 0x5, 0x3)
ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$getflags(r2, 0x40a)
fsetxattr$trusted_overlay_upper(r5, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb830609348409f4940000000000000000000000501c2289b6e7cd1d271bfacf8da73bdd2944ceaab3d65a9a4ad9a1a105da7079abc8d8aef2a161bd50e826416eb5245fc3827828a5a40285cc717c96596415c5fd39446c736acd9f635a2fcec2555149ed8d0c53b2e5055607315bed3e9226832032ba8bc342873d4631cc7734a1d4a9a72c02f5bcbe9dece8adb2ff95da76f058edc77c5a73a1a80287a6ca3d4ba86b8baf31a9b158f5442dccf51cb1e95933e0db3848b7c1a5a6677820ab134c83675181db33"], 0xd3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000340)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1f)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0})

07:02:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})
pipe2$9p(&(0x7f0000000140), 0x84800)

07:02:35 executing program 5:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x22}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
sendfile(r2, r2, 0x0, 0xad)

[  380.585566] binder: 24520:24525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  380.621715] binder: 24520:24525 got reply transaction with no transaction stack
07:02:35 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00'}, 0x30)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x800, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1e6)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3ff00, 0x3, 0xff, 0x8, 0x7, 0x8}, &(0x7f0000000100)=0x20)

07:02:35 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = eventfd(0x7)
fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "f20829313f35af6d2bf96fa70458d71b"}, 0x11, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)
open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x8)

07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
sendfile(r2, r2, 0x0, 0xad)

[  380.655220] binder: 24520:24525 transaction failed 29201/-71, size 40-40 line 2926
07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
r2 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
sendfile(r2, r2, 0x0, 0xad)

[  380.706802] binder: 24546:24554 got transaction to invalid handle
[  380.744939] binder: 24546:24554 transaction failed 29201/-22, size 0-0 line 3018
07:02:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
socket$key(0xf, 0x3, 0x2)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r1, 0x7001)

[  380.757328] binder: 24546:24566 got transaction to invalid handle
[  380.781123] binder: 24546:24566 transaction failed 29201/-22, size 0-0 line 3018
07:02:35 executing program 2:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x480000, 0x0)
r1 = add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
getresgid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0)
keyctl$chown(0x4, r1, r2, r3)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)

07:02:35 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc8a00, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x7, 0x1000, 0x2, r0, 0x34}, 0x2c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ool\x7f\x99dj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
exit(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad)

07:02:35 executing program 1:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000140)=0x80, 0x80800)
recvfrom$unix(r0, &(0x7f0000000240)=""/34, 0x22, 0x40000040, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340))
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timerfd_gettime(r2, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fcntl$getownex(r0, 0x10, &(0x7f0000000400))
setfsgid(r3)

[  380.808474] binder: undelivered TRANSACTION_ERROR: 29201
[  380.810708] binder: 24569:24576 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  380.815623] binder: undelivered TRANSACTION_ERROR: 29201
[  380.834839] binder: 24569:24576 got reply transaction with no transaction stack
[  380.845090] binder: 24569:24576 transaction failed 29201/-71, size 40-40 line 2926
07:02:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:35 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})

07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
exit(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad)

[  380.908377] binder: 24593:24597 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  380.909220] binder: 24590:24594 unknown command 0
[  380.916091] binder: 24593:24597 got reply transaction with no transaction stack
[  380.929017] binder: 24590:24594 ioctl c0306201 20000300 returned -22
[  380.931309] binder: 24593:24597 transaction failed 29201/-71, size 40-40 line 2926
07:02:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:35 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0xb, 0x3, {0x2966030dfbc06276, 0x0, 0x100, {0x1, 0x1f}, {0x9, 0x10000}, @period={0x5c, 0x726, 0xffffffffffffffff, 0x40, 0x8, {0x0, 0x5, 0xffffffffffffba86, 0xeb9c}, 0x4, &(0x7f0000000100)=[0x1000, 0xac77, 0x3, 0x6]}}, {0x54, 0x7, 0x80000001, {0x10000, 0x4}, {0xe64, 0x4}, @ramp={0x2, 0x7d, {0xff, 0x7fff, 0x796d, 0x4}}}})
exit(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad)

07:02:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@empty, @rand_addr=0x1, 0x1, 0x1, [@local]}, 0x14)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc)

07:02:35 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='o\xad\xc5\xa4\x95\xcbpH#.\xd5&\xe5Xom_adj\x00$s\xa5\x9fPr\x88\xa5GG\x90\xc6\xe3jNZ\xcd\x1a\xb3V\xf2\xb3\x18_\xc0.4!7\x00t\xa2\xa5\xb1p\x89J9\xe4\xab%\xc4e\xd3\xc2^\xb1L\xcc\xd3\x9a\xd2>\xab\xb3\x8c?6\x99\x02\xb2y8k\x90h`\v\xd1\x9d2IE\x14\x88\x17\x88\xa2\x8a\x1c~\xb7\xa5\x93\xa7$j1\xea\xb2\xb1\x85\xde\x1e\xd6\x18H\xc5PN\xc2\xeb\xde\xff\x8eHL\xf6\x10R\x86\x9e\xe9\xd6\xdb\xcd\x84\x8eLB\ts\xdb\xdfy\xea\xbcA!5\xabvH\x11\xcb\x94\xa2a\x93\xad1\xd1C\xa9\x00U\x1c\xaa\x06\x19\x9b\xb7\xaf\xc4E\xf0#43\x94\xdd\xf6\xf95j&\x12\xcb4\xbc\x1d\x98%\x84\xfaz\xbc\x9dC.?\x8f\xabb\"\xf0S\xbal5c,#\x19\xb0 \xc7\x17)\tC\x1c^*\xa2\x1f\x89[\xe7 UI\x0e\x92o\x84\xbb%&\x18\x14]\xbf\xb4\x89WB\xca(\xdc\xca')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

[  381.007549] binder: 24606:24608 got transaction to invalid handle
[  381.023744] binder: 24606:24608 transaction failed 29201/-22, size -3548580595786645504-2429707332932205836 line 3018
[  381.088564] binder: undelivered TRANSACTION_ERROR: 29201
07:02:36 executing program 2:
clone(0x2880000, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x20000002, 0x0)

07:02:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xee3c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:36 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:02:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:36 executing program 4:
clone(0x2102005ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:36 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:02:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:36 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
ftruncate(r0, 0x9)
sendfile(r0, r0, 0x0, 0x3)

07:02:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = dup(r0)
fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00')
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)={0x0, @aes256})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  381.213027] binder: 24649:24653 got transaction to invalid handle
[  381.229826] binder: 24649:24653 transaction failed 29201/-22, size 0-0 line 3018
07:02:36 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840aa"], 0xffffff8f, 0x0, 0x0})

[  381.284813] binder: undelivered TRANSACTION_ERROR: 29201
[  381.364879] binder: 24684:24689 got transaction to invalid handle
[  381.396918] binder: 24684:24689 transaction failed 29201/-22, size 0-0 line 3018
[  381.407399] binder: 24684:24689 ioctl c0306201 20000300 returned -14
07:02:36 executing program 2:
r0 = socket(0x9, 0xe, 0x4)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000280)=0x1)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000091)
write$P9_RATTACH(r2, &(0x7f0000000200)={0x14, 0x69, 0x2, {0xa1, 0x2, 0x1}}, 0x14)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x3, 0x3, 0x510e611e, 0x8000}, {0xf8, 0x2, 0x7, 0x1}, {0x1, 0x80, 0x6, 0x7}, {0x101, 0x8, 0x10000, 0x6}, {0x400, 0x5, 0x40, 0x5}, {0x6, 0x91, 0x401, 0x6}, {0x0, 0x9, 0x8f, 0xff}]})
write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6d27001000235639b70a0524000017010007002e2f66696c6530afe916ade2852c8f75855788626ac3cbe3a9c0ce0ea948f6916224179f988801524b713e9a59113e2ff4d0e4383c333c"], 0x10)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000240)={r2, 0x0, 0xffffffff, 0x8, 0x1})

07:02:36 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:36 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff00}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r4 = dup3(r2, r2, 0x80000)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000080)={0x81, 0x2, 0x3, 0x60000, 0x3ff})

07:02:36 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x7, 0x100000000, 0x6, 0x10000, 0x2, 0x8001, 0x40}, &(0x7f0000000040)={0x5, 0x3, 0x100000001, 0x27f5, 0xedfb, 0x7fffffff, 0x1f, 0x99e9}, &(0x7f00000000c0)={0x1, 0x7fffffff, 0x3, 0xfffffffffffffffc, 0x1000, 0x80000000, 0x6, 0x6}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={0x6}, 0x8})
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xcb, 0x21, 0x8001, 0x7fffffff}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

[  381.416862] binder: 24684:24696 got transaction to invalid handle
[  381.423714] binder: 24684:24696 transaction failed 29201/-22, size 0-0 line 3018
[  381.431341] binder: 24684:24696 ioctl c0306201 20000300 returned -14
[  381.438836] binder: undelivered TRANSACTION_ERROR: 29201
[  381.453111] binder: undelivered TRANSACTION_ERROR: 29201
07:02:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x80000)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8028010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
getitimer(0xfffffffffffffffc, &(0x7f0000000000))

07:02:36 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc)

[  381.473363] binder: 24700:24707 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  381.481391] binder: 24700:24707 got reply transaction with no transaction stack
[  381.492679] binder: 24700:24707 transaction failed 29201/-71, size 40-40 line 2926
07:02:36 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'erspan0\x00', 0x6})

07:02:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @loopback, @empty}, 0xc)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x6b, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  381.555107] binder: 24709:24713 got transaction to invalid handle
[  381.564530] binder: 24709:24713 transaction failed 29201/-22, size 0-0 line 3018
[  381.567978] binder: 24722:24724 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  381.582033] binder: undelivered TRANSACTION_ERROR: 29201
07:02:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup2(r0, r0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x14010, r1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  381.626971] binder: 24722:24724 got reply transaction with no transaction stack
[  381.642183] binder: 24722:24724 transaction failed 29201/-71, size 40-40 line 2926
[  381.651585] binder: 24730:24734 got transaction to invalid handle
[  381.658527] binder: 24730:24734 transaction failed 29201/-22, size 0-0 line 3018
07:02:36 executing program 2:
clone(0x7fffffff, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:36 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  381.700472] binder: undelivered TRANSACTION_ERROR: 29201
[  381.763617] binder: 24754:24756 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  381.770986] binder: 24754:24756 got reply transaction with no transaction stack
[  381.778652] binder: 24754:24756 transaction failed 29201/-71, size 40-40 line 2926
07:02:37 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:37 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
fcntl$setpipe(r0, 0x407, 0x9)
sendfile(r0, r0, 0x0, 0x3)

07:02:37 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x40000000000)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x10001}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="fb0958155a1dfbba55553239ea0989d6f122a7dff7794489ea3bdc173da45438032cd215e1b46d4d4869597a4599c4c0c405379bf0911aa7416baebebfadd640b1dcd9745247392212d70747ab53961c057f93d4da2ea011a5ad7100129e59c22061da0a230a62e2544a9d33abefda0597c27e92e853568342a7eb1921a61780daf123cc7c6d147b4163ec0790389964548d77dfce6b8881d234"], 0x0, 0x0, 0x0})

07:02:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=""/153, &(0x7f0000000140)=0x99)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000001c0)=0x40)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x80000)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0x7}, 0x4)

07:02:37 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64MMAP\x00', &(0x7f0000000240)='proc!self,!\x18securityppp0:em0systemvmnet0}{!\x00', 0x2c, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
wait4(r0, &(0x7f0000000080), 0x80000000, &(0x7f00000000c0))

07:02:37 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:37 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00004c680000a7"], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)

07:02:37 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x8, {{0x2, 0x4e23, @local}}}, 0x88)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:37 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  382.298829] binder: 24759:24764 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  382.301020] binder: 24761:24766 unknown command 358091259
[  382.312657] binder: 24759:24764 got reply transaction with no transaction stack
[  382.318439] binder: 24761:24766 ioctl c0306201 20000300 returned -22
[  382.331502] binder: 24759:24764 transaction failed 29201/-71, size 40-40 line 2926
07:02:37 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

[  382.374446] binder: 24776:24779 unknown command 1749811200
[  382.386038] binder: 24776:24779 ioctl c0306201 20000300 returned -22
[  382.403543] binder: 24780:24787 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="5f547c8c98edfb839584fbec33bc2d0a04ee0086ae5961c8131705d64cd36486ebc680b276b13d9f6deab6417ff00e742f0c8c806085aac664478c75ce3b2996600e3fda529cb911a950c4903bccc0387a73b513c3410a9babb274")

07:02:37 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  382.419785] binder: 24780:24787 got reply transaction with no transaction stack
[  382.429418] binder: 24780:24787 transaction failed 29201/-71, size 40-40 line 2926
[  382.461540] binder: 24793:24795 got transaction to invalid handle
[  382.498520] binder: 24793:24795 transaction failed 29201/-22, size 0-0 line 3018
[  382.522007] binder: undelivered TRANSACTION_ERROR: 29201
07:02:38 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:38 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:38 executing program 4:
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/113)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)='oom_adj\x00'}, 0x30)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='\x00\x00\x00')
exit(0x8000000000002)
sendfile(r1, r1, 0x0, 0x3)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x86b3)

07:02:38 executing program 5:
inotify_init()
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
syz_open_procfs(r1, &(0x7f00000000c0)='net/hci\x00')
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  383.135390] binder: 24808:24812 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  383.144283] binder: 24808:24812 got reply transaction with no transaction stack
[  383.152185] binder: 24808:24812 transaction failed 29201/-71, size 40-40 line 2926
07:02:38 executing program 2:
r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@isdn, &(0x7f0000000140)=0x80, 0x80800)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x80000, 0x98)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x4880, 0x0)
getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=<r6=>0x0)
r7 = getpgid(0xffffffffffffffff)
r8 = geteuid()
sendmsg$nl_generic(r0, &(0x7f0000001d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000480)={0x1830, 0x2f, 0xc22, 0x70bd28, 0x25dfdbfd, {0x1f}, [@generic="e105c5bd103d8766cd9028bdab92d4b209c9210dfba7c214b0761ea5938d3e41edcd71cfbe2d8e1579f862073a45acedb06d0c11a76052fb41f6e5b79b492816a4421b3035075d6df27c2cdc7098f5a1eea8521adf7fc78cbfe7c2a48c56bf85868280cdb214af32fe6858740467ef7142f5f43611147b2701758506a23c6f3221aa5fc36a23040ec061711f26227332b6eca3b605b4087e657db262ef6f7d37366ec97b144e261188960d9803cb19b30994558ad867ca0a1839348575b115a6745872018f33d9f4fdbd66c29696e6c53886", @typed={0x8, 0x19, @str='\x00'}, @nested={0x100c, 0x89, [@typed={0x8, 0x36, @uid=r1}, @generic="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"]}, @typed={0x8, 0xb, @fd=r2}, @typed={0x8, 0x7a, @fd=r3}, @nested={0x260, 0x37, [@typed={0x8, 0x16, @str='\x00'}, @generic="ccec9e2b83e87eb8184a238801fc80934d9a4adf2f201fd9517e17a43901452de40bba1cd3d2f4f857bc9fc8abc332c7624bb86c1537a1dd76cff7826b4ba2b02968a414e973fb22bc9981ac3188c8359850fbb55fa81c4b0523e70d2578d7f9eba55f1c579023ddcfddd4db984a288e9b52de1919441214c861ccbb5ddb1cad95fa7b2d244e49d56f92a3c588ad1d51aa671f74c6fc502217", @generic="d049605119f80185e6b0931832837b4aa6422f6d9529d079b52e8b5bd14dd2a492941d4f8beb962495ce53351d63eac846bb354bd7c45949717bbe2d34aeeffe2c04f694561f6e8f5f704040a381de65b293aed73e302e14bf85d5f5f31bda6c296b11991b09f52b1aa0b618caaa70398314b6766126fc67ac7d5b2a9e880e68d5af2bda1883523ba714029c50ebeabe0d0b369b62acaec315328ebaf6a8dde608fcfb825929eeef4a23758e5cff1f73355b1ee99cc16dfcad49b15642e033f31b64c5be3b78714fe1d5937fc0b3348b559246ded19f04b5610c41ea7021f53f501c4583c7b1", @generic="f6c0c6f605c2b4e28141acc3c2c113be015ca5ef9297cb6ebe4c742153849326e0d94e3c57a5840dab803bb7b47b90931ef21438e45709691b8ceb60737a6840d52de235378c108a57ed054c20027deb033ce76523b86d604fc8d272399c1d4eddc034c55c0c2bf5a15bb191c18a80b55fe8ab6a9f8ac1334b40b4edb6496ac3da286f15188b6da0dffd376649f53e5bb1245da9d43b45ecb2c2a305edb611e1785281563fd25620c364c5ea8f7759e95785bd3f82f49155363a28058332a3e4d271a3", @typed={0x8, 0x6b, @fd=r4}, @typed={0x8, 0x2e, @ipv4=@broadcast}]}, @nested={0x114, 0x43, [@generic="35ef9cf712588657a16f01afe5fdd8586d8d9bc02aea8bbbd787550498a60feaa10382e3a7ce801ef83164d33796ee882d0085316a1467d7aa87ba24193e713fc95437f4e5c51d08e33c432cdf712365cbfde4a46ce116d0d321b6fcc2f10cbff05392a9273e3e8c94", @typed={0x8, 0x16, @ipv4=@rand_addr=0x80000001}, @typed={0x8, 0x52, @fd=r5}, @generic="56f374a99246713149781b2ee6e9310363b9d5debd30ff984e35fabde8bd1e02bd2e8823fd6e8a0dafe642c0939c810022fd9a675e37278c9fa5872f453eff5b1757bae4581ed6ca2997293e1ee7a625030d78583497f129bac764bf4055cad6ad86f6a477d503407647cba2cfb45a0ff84b5611d2", @typed={0x20, 0x7a, @binary="771096abc1ffb5729dffd0e8976679c33622d6994ed00a1610fb41"}]}, @generic="9dfe053dd0bd6f681ca6f33036b661bd891f6fce2b826384f4381066fa72655b2d1af5305e366deab8d0c2ec93a5aeba5d43c3750be5cc32df63a16ce3e74c0f0d991671d92137508a6d19e1fb05b6d66a2d53c845c1dc0c2829dac83e11d556ff67f3c2c7be26d443f3ed3c2fb0ec5088f691aa292523da90245db0ff86ef534c904e1949582671d5c6316b3249f84875efc27aa9267b598d4a974b657801fdd0c9f570d4037b85054dd46ae33b7134a0b6c8e97b6fd9d336b3d502c8c9df1bf265b8fa2fa29e5bcc5229dc7d4aaef5a9d3e5ed3f9ab631b465d4f19fdd15a10dd29b5044c7e48411c1c0abe02505ef0249", @nested={0x1f4, 0x56, [@typed={0x14, 0x70, @ipv6=@mcast2}, @typed={0x14, 0x69, @ipv6=@remote}, @typed={0x8, 0x79, @uid=r6}, @generic="187347aff602b0cc63", @generic="252d4eb6b5d7dcec67b5c0c4eb133b551d6ead01c6bd5488e4fb477bce885092f040e4f1f71968b45da4b0cf8333b65b9c98672f1c6b63c74d4219397edb298ef34db8e0d0a162176fd25e5f947bea352d6273c1faf845918ce64fbdbe7642e5f6b78c58d6ecd3c4bfbb746c2533e5ef7972c342f74d478e66f611544eb91c7b723c2f02826695240525dfd22618e78a942b727cc2e10a1dafce04e8b1fae37eab3b96b860a137aa014ce7c53a68b0b3d85c09eaad25c4e19ba894843c5f15c30b6c02af7bef7124b749f0f11f2561075a04c5bbbde4ced4ee656ffb696b9ff0aa2c44703dfb66ee6adf78b639adc540666d3fffbebd9ea6", @typed={0x4, 0x78}, @generic="e187049655609aa38e706f35c3f978b58d4f896686a85b528cff8b3f45475097c76a98df3dcc71c0264f982e11a26160350fa88edb673141bcd6ca6ac4ea92a05f9bd7b33c8b9eda08448324abee4dba5932d95c66040d4ed82ef8a36d588d2cd8a832f8ca360ace84dcfb6891ae8f267640dda1b77a22fc9d124241b7841e047670692e352329a5b8846f3403ed2956a9881141558fbf76a1dd1c3f54979f9c712e7a60cd8ad8044673cdc585eeded177fd", @typed={0x8, 0x31, @pid=r7}]}, @nested={0xcc, 0x24, [@generic="40062a00f4bef8222c2b6353c617d0437f3594911b81aaf12d38da855d05a9a45be60e99c7b918475cc3652e57992653add9b5ef72047ad0881e37ff7693362d18e3fc31c4a348b0777a658aa6d751d1d4d0fe230cc97f66e84b2248ee3feac8e54e84833a43230fc320bb04a09ee92016cbff91f753adfb38ea18", @generic="e11074dc5dda50569d8880a033f3d22e71d2da61c62aa7c1e89a20521749a4f69ca6a43316e2b4bca47a7498bf5b61751de05a88c7f8dbd4e58e71", @typed={0x8, 0x27, @uid=r8}, @typed={0x8, 0x2c, @ipv4=@local}]}]}, 0x1830}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008001)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x138)
setsockopt$inet_opts(r9, 0x0, 0x9, &(0x7f0000000040)="889dc19488b834e7c3a77e1dca706184e009336d39f6cee43919dbc66f3230b6b3a0087ce1326ce58de9f94a29f602add7f909394738a5d15f0ad1968399b4e42089c82f72c20f6c6a3f0eeabcbc2603c644325374a834db32e8de2bb7f6524e1540956258a71c2257d2a29cc350a9158b2eba22f7ef60053d6a66294ca2f8e7fdc1035adb963e8abfa7ffb890923c68692a79636e2abe334ca998695a0c7cb29344eb3681a13d26a9b16051086f90f2210ed3d45119b68fca55893ce3042a393eee7419bbbabea6001d34964201bbd49cfd7c39e01567b0b572bdc38983", 0xde)

07:02:38 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x20)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x3d, &(0x7f0000000140)=""/136, &(0x7f00000000c0)=0x88)

07:02:38 executing program 5:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:38 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:38 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100))
gettid()
getpgid(0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000540)=<r1=>0x0)
r2 = getpgrp(r1)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000180))
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa748d0a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44084}, 0x4000)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="249c08454da4f709f48580955f6c14f3e5ff07000000000000bf8742010000003d6532d78762995d78b39a26df4e5994d0e2b384733c3d8dbdf41799e84dd6363c0ddff56f4a2e4004d98ca3d4929198136cd747f759e2ddccc7c00bf33743320b4d66d2703ec7c2c71cffef69f627516c24080000000000000000000000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fedbdf250200000008000600fb00000008000200ff030000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080)
syz_open_procfs(r2, &(0x7f0000000000)='net/ipx\x00')
syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:38 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x48, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x30, &(0x7f00000000c0), &(0x7f0000000100)=[0x28, 0x68, 0x40, 0x78, 0x18, 0x38]}}, @enter_looper], 0x1b, 0x0, &(0x7f00000001c0)="1fe6c0d4e7ad8f180dd30b9669d4b9e76d2b997e2e712efef5183a"})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

[  383.385331] binder: 24832:24834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  383.393607] binder: 24830:24836 got transaction to invalid handle
[  383.400674] binder: 24830:24836 transaction failed 29201/-22, size 0-0 line 3018
[  383.408482] binder: 24832:24834 got reply transaction with no transaction stack
[  383.427371] binder: 24832:24834 transaction failed 29201/-71, size 40-40 line 2926
07:02:38 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:38 executing program 1:
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  383.453024] binder: undelivered TRANSACTION_ERROR: 29201
[  383.489610] binder: 24854:24857 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  383.502368] binder: 24855:24858 got transaction to invalid handle
[  383.510155] binder: 24854:24857 got reply transaction with no transaction stack
[  383.518015] binder: 24855:24858 transaction failed 29201/-22, size 0-0 line 3018
[  383.518813] binder: 24854:24857 transaction failed 29201/-71, size 40-40 line 2926
[  383.537869] binder: undelivered TRANSACTION_ERROR: 29201
07:02:38 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:38 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)
fcntl$setlease(r1, 0x400, 0x2)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@random="00ced02cc9fb"]})

07:02:38 executing program 5:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
fcntl$getflags(0xffffffffffffffff, 0x40a)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:38 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x2, 0x6, 0x2, 0x1, 0xffffffffffffffff, 0x34}, 0x2c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x80001, 0x0)
getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xb336016d6562c6ef)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="570ec2869eda"}, 0x10)

[  383.962760] binder: 24868:24870 unknown command 0
[  383.973506] binder: 24868:24870 ioctl c0306201 20000300 returned -22
07:02:39 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
r1 = fcntl$getown(0xffffffffffffff9c, 0x9)
write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x24, 0x37, 0x2, {0x0, 0x7fffffff, 0x69b, r1, 0x6, 'cgroup'}}, 0x24)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=<r3=>0x0)
write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0002ffffff7f000000000900000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x19)

07:02:39 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080))

07:02:39 executing program 1:
r0 = inotify_init1(0x80000)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0x1b, "36e3f4ad41dc465c480da2381a34a35642ee2d6d3703742b348352"})
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:39 executing program 4:
clone(0x20202003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00')
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0x8000})
exit(0x0)
r2 = gettid()
syz_open_procfs(r2, &(0x7f0000000040)='net/hci\x00')
sendfile(r1, r1, 0x0, 0x3)

07:02:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xc)

07:02:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x401, 0x9, 0x8, 0x9, 0x9, 0x3, 0x3, 0x5e30, 0x1db, 0x40, 0x17a, 0x9, 0x5, 0x38, 0x1, 0xfffffffffffffff7, 0x3, 0x4}, [{0x6, 0x5, 0xb2, 0x5, 0x6, 0x4, 0x100000000, 0x4}, {0x6474e553, 0x2, 0x8, 0x9, 0xffffffff, 0x6b80a8df, 0x8, 0x7}], "dd95787ffe1e829e044f25d673fd536e8fc7f40a3767b5b5d808a2079563bab83078957ade5c8f8917ff1b1b8126d95cc60292e66891f4d3c4be13ac2b3df57b53072687db1b8be81b8f2eab1fc9f267da9e64fdb1d7b8409cb07d5ff6a90dea6b370d128ab18ed71f7f153ff311daf4466db366e448", [[], [], []]}, 0x426)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  384.332554] binder: 24888:24891 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  384.340462] binder: 24887:24894 got transaction to invalid handle
[  384.341436] binder: 24888:24891 got reply transaction with no transaction stack
[  384.347126] binder: 24887:24894 transaction failed 29201/-22, size 0-0 line 3018
[  384.355752] binder: 24888:24891 transaction failed 29201/-71, size 40-40 line 2926
[  384.414944] binder: 24905:24906 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  384.423967] binder: undelivered TRANSACTION_ERROR: 29201
[  384.425402] binder: 24905:24906 got reply transaction with no transaction stack
[  384.461032] binder: 24905:24906 transaction failed 29201/-71, size 40-40 line 2926
07:02:39 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:39 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000aa00000000000000"], 0x0, 0x0, 0x0})
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)

07:02:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
write$eventfd(r1, &(0x7f0000000080)=0x3, 0x8)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  384.783041] binder: 24917:24920 unknown command 11141120
[  384.787029] binder: 24923:24925 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  384.794933] binder: 24917:24920 ioctl c0306201 20000300 returned -22
[  384.796777] binder: 24923:24925 got reply transaction with no transaction stack
[  384.810397] binder: 24923:24925 transaction failed 29201/-71, size 40-40 line 2926
07:02:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext2\x00', 0x0, &(0x7f0000000180)='/dev/binder#\x00')
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000080))

07:02:40 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
creat(&(0x7f0000000000)='./file0\x00', 0x20)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101000, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x24000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:40 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0))
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3, 0x800, 0x10001, 0x80000000}, {0xfff, 0xbb, 0x1800, 0x5}, {0x800, 0x9, 0x1, 0x1ff}, {0x3, 0x0, 0x80000000, 0x6}, {0x6, 0x200, 0x81, 0x2}]})

07:02:40 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000640)={@dev, @remote, <r2=>0x0}, &(0x7f0000000680)=0xc)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={<r3=>0x0, @empty, @empty}, &(0x7f00000007c0)=0xc)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000800)={@initdev, <r4=>0x0}, &(0x7f0000000840)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6erspan0\x00', <r5=>0x0})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000008c0)={@rand_addr, @initdev, <r6=>0x0}, &(0x7f0000000900)=0xc)
getpeername(r0, &(0x7f0000000940)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f00000009c0)=0x80)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000b00)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', <r10=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d80)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000e80)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000fc0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001040)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000001140)=0xe8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001180)={<r14=>0x0, @loopback, @loopback}, &(0x7f00000011c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001200)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000001300)=0xe8)
accept4(r0, &(0x7f0000001340)=@xdp={0x2c, 0x0, <r16=>0x0}, &(0x7f00000013c0)=0x80, 0x80800)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001400)={@initdev, @dev, <r17=>0x0}, &(0x7f0000001440)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@ipv4={[], [], @local}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000001580)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001cc0)={&(0x7f00000015c0)={0x6c8, r1, 0x420, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x1c8, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x2, 0x40, 0x0, 0x1ff}, {0x1, 0x8, 0x81, 0x400}, {0x4, 0xffffffffffff0f86, 0x100, 0x6}, {0x2, 0x7, 0xfffffffffffff801, 0x452}, {0x2, 0xffff, 0x1, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x250, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r14}, {0x204, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8, 0x6, r18}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x20004000}, 0x2edc2f93129deaab)
sendfile(r0, r0, 0x0, 0x3)

07:02:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x100001015}, 0x2c)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x8bc573c1cd05ebca, &(0x7f0000000380)={[{@mode={'mode'}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xcb}}, {@mode={'mode', 0x3d, 0x614b}}], [{@euid_eq={'euid', 0x3d, r1}}, {@euid_eq={'euid', 0x3d, r2}}]})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  385.278092] binder: 24940:24943 got transaction to invalid handle
[  385.284980] binder: 24942:24944 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  385.285622] binder: 24940:24943 transaction failed 29201/-22, size 0-0 line 3018
[  385.295087] binder: 24942:24944 got reply transaction with no transaction stack
[  385.303291] binder: 24940:24949 got transaction to invalid handle
[  385.314867] binder: 24942:24944 transaction failed 29201/-71, size 40-40 line 2926
07:02:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:40 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

[  385.319229] binder: 24940:24949 transaction failed 29201/-22, size 0-0 line 3018
[  385.336701] binder: undelivered TRANSACTION_ERROR: 29201
[  385.342338] binder: undelivered TRANSACTION_ERROR: 29201
[  385.366780] binder: 24956:24958 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  385.382924] binder: 24956:24958 got reply transaction with no transaction stack
[  385.406429] binder: 24962:24963 got transaction to invalid handle
[  385.414085] binder: 24956:24958 transaction failed 29201/-71, size 40-40 line 2926
[  385.422822] binder: 24962:24963 transaction failed 29201/-22, size 0-0 line 3018
[  385.452794] binder: undelivered TRANSACTION_ERROR: 29201
[  385.504577] audit: type=1326 audit(1553151760.373:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x0
07:02:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00')
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:40 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/netlink\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)

07:02:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:40 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:40 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @speck128})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1506000000"], 0x0, 0x0, 0x0})

07:02:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c1284f3c8c30877005f3f3188b0f0014f0392cc580b75adaafa678591a0aec849fc8e68d70ce083")
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x14)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
timerfd_gettime(r2, &(0x7f0000000240))
statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1800, 0x40, &(0x7f0000000100))

[  385.601080] binder: 24975:24979 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  385.612402] binder: 24975:24979 got reply transaction with no transaction stack
[  385.620553] binder: 24975:24979 transaction failed 29201/-71, size 40-40 line 2926
[  385.626220] binder: 24974:24984 unknown command 1557
07:02:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  385.648581] binder: 24974:24984 ioctl c0306201 20000300 returned -22
[  385.678492] binder: 24993:24996 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  385.701166] binder: 24993:24996 got reply transaction with no transaction stack
[  385.708774] binder: 24993:24996 transaction failed 29201/-71, size 40-40 line 2926
07:02:41 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84000)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x87, 0x29, 0x1, {0x4, [{{0x8, 0x3, 0x4}, 0x3, 0x0, 0x7, './file0'}, {{0x40, 0x2, 0x5}, 0x3ff, 0x3ff, 0x7, './file0'}, {{0x4, 0x3}, 0xff, 0x7f, 0x7, './file0'}, {{0x80, 0x4, 0x2}, 0xfffffffffffffff7, 0x1, 0x7, './file0'}]}}, 0x87)
r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8400, 0x120)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @rand_addr=0x7}, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='hwsim0\x00', 0x10000, 0xd6c, 0x79})
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:41 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25)

07:02:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1)

07:02:41 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = getpgrp(0xffffffffffffffff)
keyctl$session_to_parent(0x12)
sched_setattr(r1, &(0x7f0000000380)={0x30, 0x0, 0x1, 0x7, 0xffffffff7fffffff, 0xfffffffffffffff7, 0x2, 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000780)={'U-', 0x8ce}, 0xffffffffffffffe6, 0x1)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000680)=0x2)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x202000, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0x76, [], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/118}, &(0x7f0000000340)=0x78)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x80000024)
lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@ng={0x4, 0x1, "e4e9f83a3958344f"}, 0xa, 0x3)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000080))
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000004c0)="216b1fbdaeeb1855eed9b16f82755f38bae550ce61aafe4d4fbfb57525ad884c19a104d2eceac6ab43861480117e639197a34dd449dc86ae4eb8cf6ea4bda6cfb8e3052f0bdf2f975fe44f55c519d384f71bc98d587961a599bc6baae5ec2669920966603d2f2e020f5584ad09739d1e6bed9b5fbeb9df9d1902bec3fcc0917d6fbf015f07d3a5311306f724ce05382c9e59b40e52251f47b9", &(0x7f0000000580)=""/111}, 0x18)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000006c0)=r2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})

07:02:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  386.251051] audit: type=1326 audit(1553151761.123:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x0
07:02:41 executing program 5:
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x84800)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$9p(&(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x800)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x0, 0xeeaf, 0x7})
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)

[  386.317896] binder: 25005:25009 ioctl 400445a0 20000680 returned -22
[  386.322433] binder: 25007:25013 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  386.325758] binder: 25005:25009 unknown command -352321289
[  386.336134] binder: 25007:25013 got reply transaction with no transaction stack
[  386.340373] binder: 25005:25009 ioctl c0306201 20000300 returned -22
[  386.358104] binder: 25007:25013 transaction failed 29201/-71, size 40-40 line 2926
07:02:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:41 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x800)
sendfile(r0, r0, 0x0, 0x3)

07:02:41 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
chmod(&(0x7f0000000080)='./file0\x00', 0x100)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  386.370231] binder: 25005:25018 ioctl 400445a0 20000680 returned -22
[  386.395154] binder: 25005:25018 unknown command -352321289
[  386.413933] binder: 25005:25018 ioctl c0306201 20000300 returned -22
07:02:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
getpriority(0x0, r2)

[  386.434292] binder: 25027:25031 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  386.465666] binder: 25027:25031 got reply transaction with no transaction stack
07:02:41 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="c66fb3d3f9aa3654d78e9eb0702704b2432f4e7413e5011d6f1bf59441bc18c9173c6ddc8a56d8110bc26cc66bf7f44eaf7c42c8ed6bdd42ac8c0496220b3fdf12e6845741ff4e6adf5f5c0314cb2b011f6c6b808b7958486733d357121938c2c4c860f6d4cc65050ab1d88bb1bca9b971cae2b8c4cacb6f28afa8a29633bda0d0367e00b507735bf6e495fc041e1f8b3cebe48a74c43b2b169136ddd6c6fa5395fe542f3751ca7fad77c2548eacf2f4f416eb29462248", 0xb7, 0x0)
r3 = request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/dev/full\x00', 0xfffffffffffffffe)
keyctl$reject(0x13, r2, 0x101, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0)
getdents(r4, &(0x7f0000000340)=""/4096, 0x1000)

[  386.479394] binder: 25027:25031 transaction failed 29201/-71, size 40-40 line 2926
[  386.534643] binder: 25044:25047 got transaction to invalid handle
[  386.542609] binder: 25044:25047 transaction failed 29201/-22, size 0-0 line 3018
[  386.561677] binder: undelivered TRANSACTION_ERROR: 29201
07:02:42 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x80000002, 0x0)

07:02:42 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
getpeername(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x80)
exit(0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000))
sendfile(r0, r0, 0x0, 0x3)

07:02:42 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1008008910, &(0x7f0000000040)="0adc1f123c123f3188b070")
vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="bc18fd41e10dbd12b9ce330952a664e7efd0b267c29662493d05c5f201a2f3c0ab50ed394848b36f42800f910c8a98bba6610b74126a336b25feb515c640d354dfc0de676788195ec5798120686dac59428cb9187ba26e4fd8d4c1f85a178c2969d1435626f16ca86e2842e899b0ecbf17b0d09fd3d50bfd1a1d3a99f3cf43a2dd4210ee8b68fd18e70d943763cd9a649e71a2583c2ed1133a03a045f158edc66b400bee8103bd00f847d12094faa0dbcd29070f5ab4bae1baabe8038a5a71b6d7a192e6601a83484dce132fb617c95495d884ae4477e810327f02254acc110d7288d942ef245640f417a41d0fdc2c4d", 0xf0}, {&(0x7f00000001c0)="cdb02aa1d0f909fcca186817f6892e455d33067da593184f530898ec1d97c4194d4574d9151d2f7bde04b92cf5879d98fc6350ff3a551e8838fe084477b37414f6b148a84cebecce8f60ae60308b56f4d802d929a9f3f41a6f962b14cfc2f2f6cb5b87db0df36ace77ad961cdf5b2bef59d2b7f409ddbdc3d93a8cebbd978eda98f8bb3f", 0x84}], 0x3, 0x4)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000010)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$KDMKTONE(r1, 0x4b30, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:42 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:42 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
splice(r0, &(0x7f0000001100)=0x18, r0, &(0x7f0000001140), 0x8, 0x3)
exit(0x402)
io_setup(0x400, &(0x7f0000000000)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000000c0)="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", 0x1000, 0xdc8d, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000010c0))
geteuid()
sendfile(r0, r0, 0x0, 0x3)

07:02:42 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xad)

[  387.212604] binder: 25060:25064 ioctl 4b30 7 returned -22
[  387.221122] binder: 25060:25064 got transaction to invalid handle
[  387.227536] binder: 25060:25064 transaction failed 29201/-22, size 0-0 line 3018
[  387.240117] binder: 25062:25066 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  387.247633] binder: 25062:25066 got reply transaction with no transaction stack
07:02:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116c4840aa"], 0x0, 0x0, 0x0})

07:02:42 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xad)

[  387.285544] binder: 25062:25066 transaction failed 29201/-71, size 40-40 line 2926
[  387.300730] binder: undelivered TRANSACTION_ERROR: 29201
07:02:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/31, 0x1f}, {&(0x7f0000000780)=""/139, 0x8b}], 0x2, &(0x7f0000000580)=""/39, 0x27}}], 0x3fffffffffffe13, 0x10001, &(0x7f0000000600)={0x77359400})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
waitid(0x2, r1, &(0x7f0000000100), 0x0, &(0x7f0000000180))
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))

[  387.339365] binder: 25088:25091 unknown command 1078488081
[  387.380177] binder: 25088:25091 ioctl c0306201 20000300 returned -22
07:02:43 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xad)

07:02:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:43 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = dup(0xffffffffffffff9c)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fedbdf250800000028000076657468315f746f9ae66b440c85e3f25f7465616d000000080001000307000000000000000000000000000000ec2209ee2335fd6f0f28c021a4039d63c0d29b9f51c73b59fadb946d8c62c99017fadb51f7cb8dd43118e17fb45046667b03adc7b9c0112593"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000804)
setns(r0, 0x64020000)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x180010, r0, 0x0)

07:02:43 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x4)

07:02:43 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)

07:02:43 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xad)

07:02:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x1ff, 0xfffffffffffffffc, 0x0, 0x7})

07:02:43 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x6)
sendfile(r0, r0, 0x0, 0x3)

[  388.235977] binder: 25114:25117 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  388.246682] binder: 25114:25117 got reply transaction with no transaction stack
[  388.254936] binder: 25115:25122 got transaction to invalid handle
[  388.265437] binder: 25114:25117 transaction failed 29201/-71, size 40-40 line 2926
[  388.274384] binder: 25115:25122 transaction failed 29201/-22, size 0-0 line 3018
07:02:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:43 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xad)

07:02:43 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
pipe2(&(0x7f00000000c0), 0x800)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000000400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="54c33f44aa51771926b3633dfcd8de3dbcb0d2c1"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')

07:02:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:43 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="95c854e71aaef6d5429d7724f9dc4a6b8f16fbe329bbe61eaaac3b8f62cda2602b0e5cbf44fd677e3edf8f76f239239090711ad9952fbee24fd33e16a4f2358f9d1d8576adb4dad983151d118e0f595518afd647479ddab386ef518b22a734620ff65a6e856d78a8e5262d1027d0d3f20659c580471f7ed7aef434648f593c88c2aabb512696a7cbd59c0444b2771ef871cfa3b5b574b7459290", 0x9a, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0xff, @mcast1, 0x1}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x3)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x3, 0x1, 0x908, 0x1, 0x4}, 0x6, 0x9, 0x10001})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r2=>0x0)
getpriority(0x0, r2)

[  388.308982] binder: undelivered TRANSACTION_ERROR: 29201
07:02:43 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xad)

[  388.376108] binder: 25145:25149 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  388.383998] binder: 25143:25150 unknown command 1145029460
[  388.402013] binder: 25143:25150 ioctl c0306201 20000300 returned -22
[  388.403339] binder: 25145:25149 got reply transaction with no transaction stack
[  388.417895] binder: 25143:25150 unknown command 1145029460
[  388.425463] binder: 25143:25150 ioctl c0306201 20000300 returned -22
[  388.429283] binder: 25145:25149 transaction failed 29201/-71, size 40-40 line 2926
07:02:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = epoll_create(0x4)
epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb47)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000)

07:02:44 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:44 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x0)

07:02:44 executing program 2:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
clone(0x2000000, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  389.305882] binder: 25178:25184 got transaction to invalid handle
[  389.308837] binder: 25181:25186 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  389.314720] binder: 25178:25184 transaction failed 29201/-22, size 0-0 line 3018
[  389.319905] binder: 25181:25186 got reply transaction with no transaction stack
[  389.330927] binder: 25178:25192 got transaction to invalid handle
[  389.335364] binder: 25181:25186 transaction failed 29201/-71, size 40-40 line 2926
[  389.341472] binder: 25178:25192 transaction failed 29201/-22, size 0-0 line 3018
07:02:44 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x0)

07:02:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:44 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/244)

07:02:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
fcntl$setpipe(r0, 0x407, 0x8001)

[  389.357551] binder: undelivered TRANSACTION_ERROR: 29201
[  389.363208] binder: undelivered TRANSACTION_ERROR: 29201
07:02:44 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x0)

[  389.432695] binder: 25195:25208 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  389.441875] binder: 25204:25210 got transaction to invalid handle
[  389.450983] binder: 25195:25208 got reply transaction with no transaction stack
[  389.451946] binder: 25204:25210 transaction failed 29201/-22, size 0-0 line 3018
[  389.458678] binder: 25195:25208 transaction failed 29201/-71, size 40-40 line 2926
07:02:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @loopback, 0x1}, 0x1c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0015aa192f6a02ce9fd89c19833abea834"], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.ctat\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xb7}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000054)
read(r0, &(0x7f0000000380)=""/108, 0x6c)

[  389.488582] binder: undelivered TRANSACTION_ERROR: 29201
[  389.537124] binder: 25220:25221 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  389.546550] binder: 25217:25222 unknown command 430576896
[  389.548287] binder: 25220:25221 got reply transaction with no transaction stack
[  389.553833] binder: 25217:25222 ioctl c0306201 20000300 returned -22
[  389.559733] binder: 25220:25221 transaction failed 29201/-71, size 40-40 line 2926
07:02:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x860}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl(r0, 0x100000890f, &(0x7f0000000080)="1ddc1f123c123f31c8b07049f03872dd8d32048d38e6f8a463b6b34c1f9873081d22201b6d6a90b8ce38d1774d3a4d732a7bc2d6f3")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:45 executing program 0:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x6, {{0xa, 0x4e20, 0x71c0, @rand_addr="a3be2aed827c0448e5ed60c444651962", 0x200}}}, 0x88)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x3)
sendfile(r1, r1, 0x0, 0xad)

07:02:45 executing program 4:
clone(0x2102006002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

07:02:45 executing program 2:
clone(0x80000, 0x0, 0x0, 0x0, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
wait4(r0, &(0x7f0000000000), 0x0, 0x0)

07:02:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:45 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fremovexattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:45 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4)
sendfile(r0, r0, 0x0, 0xad)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
r1 = getpgid(0xffffffffffffffff)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getpgid(0x0)
fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getegid()
r7 = getpgrp(0x0)
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getresgid(&(0x7f0000000700), &(0x7f0000000b80), &(0x7f0000000780)=<r9=>0x0)
r10 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000008c0)=0xe8)
lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$unix(r0, &(0x7f0000000b40)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="d56b96227162debb10c91cc10287022a364a1440af873675a5d5e4fdffa33ebb37187afe1accafb406ef169a5d70b4732f2f52e74ad170632e6d100e2619e397e307e8f8634e42f49e2f4714d110f3153fced758d17b3af2ebc116f3ed63c38d7f178a32f0db4f399e4532f0dbc037e5b0badcfac196b1691a1e2296eac2db75845367ef52dfc7f778b327d570aa7b6bc8c7116197b54537359fcb64ffc7a996ce9be5db3536ca3bce2c847acaea365645e7c86d26ac0dea712a20ed010e7232550c29748490f299ad8af1ef4e6fecbb24902e18c586498cbebbd0991498a9696411b5755795940ce478576878dd9fcff5197de56f5147fb00f84a34bf", 0xfd}, {&(0x7f0000000240)="8f4e74d51d07e2efed386650d0a4f6befd5063182a8243425a95b69dc51ba9fd2aa74503dbbb8839c0056fb89a6dccab83e1b2a23c2c21bc1de8d778ce8d5287259a3005bb16908dfb7b2d51077ef7efd45ad0b5abff73970650f5054a16bdc99499a606d6dd01cecfb439379b50f6adb52424ba766b1c6154cdae0171e30b69b02f93f20534f825265be138e1764aa4ba2c5b6e8c28d9c7512dd5cf6adfaa293295e00457e88e2da5c588cc7be5a45ca516379cc17e0a76e01ac0dce95a487e3afcddf89ceb7094b9283c447d0db157cfdc2eb8fc4cd0", 0xd7}, {&(0x7f0000000340)="b86cc287c4e9cca86d1f12eff330a0e94322238d579a99793bc5f8b0ceb83dab91d40c88078961f88abcda9cc9f9315cdc5506f035db7badca9958ba6b4b0515412a8067ddfe08f2051169ce416d2fdc12bbe5aa090ac26f", 0x58}, {&(0x7f00000003c0)="3cf18adab100562280b715f2337df7ddb18c132cb7163839839ed8d0440089f048758a30a8917e25b97ccd5b6b7c411889ba83602211f88c4d41f313a9da558d0c53a7a4b4b139dad90c2dc630223f87262022516b670c7226573a990316dec47697279236", 0x65}], 0x4, &(0x7f00000009c0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x150, 0x20004000}, 0x40)

07:02:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0))
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)

07:02:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
creat(&(0x7f0000000100)='./file1\x00', 0x10000040)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)

07:02:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11f64867f9e894b674223dee3900b3725720c14d404602e967f6d6fab24919fbabc69c22fef29351b27324e640a2ad538bfa3d9bda2c93f04cb29c7b0ccfe64c1c03f2caf855d4cf64406f2d48116b82e15b2b58c27d67"], 0x0, 0x0, 0x0})
r1 = getgid()
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getegid()
getresgid(&(0x7f00000000c0), &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180))
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getgid()
r7 = getegid()
getgroups(0x7, &(0x7f0000000200)=[r1, r2, r3, r4, r5, r6, r7])

[  390.431718] binder: 25253:25256 got transaction to invalid handle
[  390.431817] binder: 25252:25258 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  390.438913] binder: 25253:25256 transaction failed 29201/-22, size 0-0 line 3018
[  390.455042] binder: 25252:25258 got reply transaction with no transaction stack
[  390.465075] binder: 25252:25258 transaction failed 29201/-71, size 40-40 line 2926
[  390.471714] binder: undelivered TRANSACTION_ERROR: 29201
07:02:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:45 executing program 0:
r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x208, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x652}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x44044)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_mr_cache\x00')
exit(0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=<r4=>0x0)
ptrace$setregs(0xf, r4, 0x6, &(0x7f00000000c0)="3699c5ad7dd5ca08d2f4550393a2bf88718649b4e2877b58d0be306522c8ec9e8dbc9d2789839f10c48e8160ab2e28f254c626ed294898ebc09393720c766a147c80a78bf027cc09fcd487737ae59314a09e51fe3d6306a558a9718c95770b7d9808c067242291e261ed6384ccef5738c9288e2aca3c6d1a16ef0638ccb6a59e0fb606c11a484f22029cd87c40636096c8eb15d0f267165c1e9bfaceda718e63c6175d55efa9fc561cba8be3fce96c2299b4ab2aade7573edd15c2b28681950626003b4bb2a5b82bf389121edee9e8cdf1c7ff5dd5dbf1de72d8fc1e3d7804c179c900")

07:02:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x200000, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, r2, 0x40b, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x188800000000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x84bd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe73}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff32}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

07:02:45 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
dup3(r0, r1, 0x80000)

[  390.554608] binder: 25272:25279 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  390.581024] binder: 25272:25279 got reply transaction with no transaction stack
[  390.594824] binder: 25272:25279 transaction failed 29201/-71, size 40-40 line 2926
[  390.620560] binder: 25287:25295 got transaction to invalid handle
[  390.644878] binder: 25287:25295 transaction failed 29201/-22, size 0-0 line 3018
[  390.670074] binder: undelivered TRANSACTION_ERROR: 29201
07:02:45 executing program 4:
clone(0x80800000010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
lseek(r0, 0x0, 0x1)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1a176591)

07:02:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:45 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xfffffffffffffffe)
sendfile(r0, r0, 0x0, 0xad)

07:02:45 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000007bdf5813f5e167fdd68ad324a74d120000000000303579689fb19921dc08afa24668bd8923ce0f1e90"], 0x0, 0x0, 0x0})

07:02:45 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
ftruncate(r0, 0x6f3)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:46 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x5c, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x4, 'lblc\x00', 0x20, 0x381f, 0x31}, {@multicast1, 0x4e21, 0x1, 0x2, 0x731d, 0x7}}, 0x44)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11632b4035f6f475625fd113823983c5a2aa"], 0x0, 0x0, 0x0})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="7ef788f5bb6750ec21decc53b57718e29c5f71c4fb70a57a0141d27934ed3bc144665738b339208c5e4e3d0e59c210fd18f5ac225eb0549b7ad627fe6b44e969893a4e9eddd8a67eaa6a7943d0142576c9f863d54d20a101aae804e7f8d9295920eec1ca1854b3270401bc16fccd6804090523a894603c857b3df2098bf9fcbf80ded991a4501b9d4a24f2dc1059e7eeb6c1c0ef71b3149112b42978dd64d8fc598d1f2b24", 0xa5)

07:02:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)=<r2=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000009c0)=0xe8)
fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={<r5=>0x0}, &(0x7f00000021c0)=0xc)
lstat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004740)=<r8=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004780)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000004880)=0xe8)
r10 = getegid()
sendmmsg$unix(r1, &(0x7f0000004980)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000200)="6b321feba95b4eb6d761f2b89d145e9d6a4e53267b9d1e705b2fe2", 0x1b}, {&(0x7f0000000240)="8c7b2346e0c4ccfc0041d5f869ed319c389fa2c7a37e35cf7b746dd93a24177d6e12aa5d93c37a490a9332096d39abe78bab6812a6977723cefba1abfe54ba53dfd9486028a7d92a1d501dfabd57aa3085feae55f878527266b41dccd7386113d9460a70e0932199534ca20e0d67b299e737effafd372fa51b00e44cd274bc5779a0d429994c87a07681fc2bd459d158187e1cc13cd60a118018cf8636242139096fc312b6f58a3f1d0b2f07fcc74187bc3582ba9e377f4c308992fa6acde83d1952e4b0732f19331a66a8f433e347d689afd20c22edf7038534dc9c118907d87d", 0xe1}, {&(0x7f0000000340)="9fd40fbdb62b54b27e27a92b238e13c776a1ef9f0e4b715da9270c705342d217ba1af7a689375c8996b52b60688099e2eea8f0755a8b07", 0x37}, {&(0x7f0000000380)="526734e9865d62b43066b59ada82456bddbfe0830f74eb8068fce0", 0x1b}, {&(0x7f00000003c0)="d949c6d1039fb11b63c7f3118aa8ed88154adf28fcda08de74604f14873c700326b04740db4ab2bd33775ceb32722e9ce34a", 0x32}, {&(0x7f0000000400)="cb50d5d4baa8cb8cd2e7daaef212291d3f209c5ba4e93e9378839558b1313f225f25afefda6bd6e9c359124feccc0c2c912abf1fa0f4c0dd8312cad6e12f3e2440f869e3", 0x44}, {&(0x7f0000000480)="7c0bdfd6a0f438250b7712085a711764525cfe76be1852ccf59d2a4274f1708e7a4d0eb2f5bea7711a04da0f867ea80758359aeb3387db053cc52fa8decd5f7a7beb65513ae0b0c0d405234a579c30c07390f621dea8a28f2ffa53476ca52a37009cbd2745a34248de26ddaff722041d369b179f08a1bcef0faa27a01e8bfdc9903e1df74afebb2fda4cb62e5f94dbb6b3b762e8ea775d256e6dee0442df641281e5d7d0bf332c6ca41f21e9a2", 0xad}, {&(0x7f0000000540)="565c34daf0574c80e07d11563b6847d7609f4b69c1fbc8f30bef29e4984f03b25ebedc54135ad99dd48651c733d3c7b83a352381ea130511196bc04d56c804882706be1769fa1c510adbe623387213", 0x4f}, {&(0x7f00000005c0)="50e90337f508842eb0d8fd04d4faf91f19ed3d538e205cfa710f3f8a17326536a9d0eb7b70cc6dc9c7c38ffc91e6107679e20bc616c0ef37c517e5918f292027bcd11054c1e475ffd7e59e680c7d86aaf262197c686df556c0c181d7e9614a068b60eec6e5bbe214abc67786d8449ea890f10b8c7acbf8b032ff9def258a5112372829107a3a259fe1c6742d48b4f5e5f09b1ef329dfbded142cd04f34ea0124150c10f7e8b1674085a81f3985ee49de6e6e85eb9394ec3e020f9192b6b7db5d11ddf643be816967db740a6bcffc723b2291d59ebaa9761a641464004ce4b354f0b69ed92bdc3d85a2b58e27e4516028bd39ccca3c01eb214934", 0xfa}, {&(0x7f00000006c0)="8bc5980ae5c7b13af89bbd991a9b945d45cca3973334873039d4d5038593a5cf61cde0f9c8df4f7cab5f7c96cdb329c8aaaae8cc02821cba932b9379b69efad27baa6989c9cfd8d243511af7e5b8d9526cac32f292b23f92e5246d68ba21441688886580935652a173e4075f1a33993b3cbd487d4a794193da590c571fb7e7155392ac5b85b0b2fd95d0d3bfb97d46f77dc0ebfd6bb00416b6ff5447c094d4a8c39f5a372b7ccfb3fee5e1386cc90110a77bf746f3b4b28617abbb88f24e4971858a0706b312c73472bac9edf93296afed53f2fc1a7eb332ce2b9107f9", 0xdd}], 0xa, &(0x7f0000000a80)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x68, 0x4800}, {&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000b80)="9bd497582e1faa350c22b8ed5032b043caa07be203e0ce6ab615872ed3ffebe0d07fa283f9826980f3c4ec29dc1f383e2f57cb33c766fc1cf5caa7481714d54666bff53f10a8a253bde6e472fe6d56169ea44bcba072661968c5ea0d01a420d0e61b49ce25ca0b8e664bc673edcc96eba44b0c6f17a57cbc0ec072e88bb5d63ae629a0512e6d92bc50a8e53ca854a5a3ba44b3625bae065835b9996e692c5781ff79278e0f2e1bf811408c932c23edc88ae8572001ff8b1b26", 0xb9}, {&(0x7f0000000c40)="586e0d587c2748bc2a452c2b515fb8708c820b5a1a13dc2bb724b1224dd216ad66dad0d5aa1e19e28344a4a67d68008d231e231d9b7e2cc2d090fad6693efb959b8252221e4152dfdef907a9e2f7eaa6f2568c111e9b217b0c831060d3e64d952bd6d565d2f184cd422b9d083680518919f548208f765c2e49918d4e48a5ffe4c59ab952d9c3b411006afe30507dfae11dec175ad90b8f560cf1a16a320d6290d27b0423cac86df676893e689b857f7d39941ed66ee1eec5798e54d45d3f1d0ac408c37ba37e9d781c49970f6f4e53570df91e915b2a4029da94ee2613a34a5821afb4c0d7537fef1fa42b50d1", 0xed}, {&(0x7f0000000d40)="c775837639e68e7b21bb89a1a8c43e216300e2a646d0dfd5e0ecfdf6cc2a40aeecacb6ceec51d00b5c847c57a82112b6556eba78231b2484a6af6ba4d6ff592e592162c223f4909e6c8a4a58b9459c7347ec0c1d4f312e1916c38d14551c71cac12d894b222776b31a6f2c733873c57f9d1f9f50", 0x74}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="9cd10239bd2f0ec0f9567b85b8543601bacae6fb050ff34957c24de64185e2ebaadbbc9af785eac7fe40120b92a4cd7a804d7a1b9c7ea3d1037e233006007e2c0b9269366d6261e2959dbaaa5c7386d09cc4b36dbd3cb4e15dc9167136b06726a936a68de2d40dbb54d1465409a5a0561c5a52df8f02a9196af914a34ea576cd7bb17dac2a53fed53b1e81213c945c375ff891fc728aed8ba2df5ac13ddf3bc2c39e8dd6746f38b735365dda905de9fa25003ea3524490b0837e4583f2cef72e2769b9feb62bba845819d38beaceb4edcc548b7146ea4caa7f225cc53d97029875af6cbcbf510d5595b7585ef0a2", 0xee}, {&(0x7f0000001ec0)="bdbb1275c730744c6f0c773ae2b39d6f267bc86e98de99fc5e457b9a4d4a71214d8e66edfa8f5ff3697646101f0f8d7a4e1c83cc558e8c68ec386220cdc190d899cf5cf483c1eaf684044fb64a33063a786442411393afb4fcc2151b231ac35e73f973d18b4f7242968f67f95f995213d9a890d2f269e69926dd1aeb83bf0bea3eca6e935ea22ae7b2347139ec620c3321fe08c1f7c43f7bcbe3fe3cb2f3e028aa0bc1bfe4b2613f514375cbc3df4e6b211609e7e935c74b3813f59d27c72edd20a60d6fa6d0c010cd5310c2d625033e7312f6eddfc35a1e2b07c7a16ff25bedc1d9b91e365ca9dbc79688443535a4", 0xef}, {&(0x7f0000001fc0)="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", 0xfb}, {&(0x7f00000020c0)="6a6e030c1d0c97c75ce9d31c", 0xc}], 0x8, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x805}, {&(0x7f00000023c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000002440)="7707b964b9c2f477f9e9de99babf9569b4d50ef46c4ea92ea5e07f8f52c82114ca518cae7dcd1bb2e6dc756b8190bfde887861", 0x33}, {&(0x7f0000002480)="a5229f24035305bb75872de3f62402e54f6cd8aa4a3d340423c79ab1323e3eb23f042c67cbbddba2397da1032e52a4aee1482dec615e4703b504cd44b5681c246e4a7412490ea15b", 0x48}, {&(0x7f0000002500)="ae1a147dc480b3170e187e3c716c05b204749409df8e61f50082a4a754baae61c7af8264b96e7c94ce660f38af2ff241e884a84ad8c6c75b49196e60635b991499bdd674f938310a0860f76518182c2de8be7e4ce90bd1b497fbefd8b5b335c657a8da70b3158b64807a2df5a8213b3f80ce332f9af277dd6f5fa8cd6247", 0x7e}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="2d1bf401645c00bd4b15cb0b59474317f2d62381cefd0c", 0x17}, {&(0x7f00000035c0)="7f326bd6abe30c50c8bfb36ea32a4713e670aad4e15fb69f163422f0c220e949251b3f19f2a11364904309c15864dcf653bcb301b7", 0x35}, {&(0x7f0000003600)="cd85cfeb75964b08b9387388933aee6e73d6c1dc570927f299ca69299f8b61523dce3a88287a9469419f937d1cd52aed3fcfca830960266c2194de994118d6573400c0611c9990eb37c276680b6812ffc18886af7627f54e1b9dc3cee07788b5c0f64a963e235d41bfaeb6fcbdc44700db4776fff8ffeccb9dd1830e11a8917e624620057d968a754ecf2c54ea4f329d7efe69d27306e79e633bdcbaec5fd404d0e3ad75c9a5a9", 0xa7}, {&(0x7f00000036c0)="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", 0x1000}], 0x8, &(0x7f00000048c0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x98, 0x20000001}], 0x3, 0x4004)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc3f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x804)

[  391.102076] binder: 25310:25312 unknown command 2063597568
[  391.108684] binder: 25307:25314 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  391.109674] binder: 25310:25312 ioctl c0306201 20000300 returned -22
[  391.116359] binder: 25307:25314 got reply transaction with no transaction stack
[  391.131562] binder: 25307:25314 transaction failed 29201/-71, size 40-40 line 2926
07:02:46 executing program 0:
clone(0x203, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xffffffffffffffff)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4)
eventfd(0x9c)
sendfile(r0, r0, 0x0, 0xad)

07:02:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:46 executing program 5:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl(r0, 0x7, &(0x7f00000000c0)="3efe9f78c180ff791d3ff44cc781b59d50758237904c1e5fac03080cfc86c40fe853b28f42d543efe9c0db33caab85119a25d9ed25452cafaa0bdc8f3fb2e5c445fe43964d6649b421b03c3b4a1f908e52e4bf371050169ad33fbc673ef9e65968b63a94ad0013eb036ef490a7e21793f9f6c95df016103562cf25bddb9805399946b46ca2106b44451a34a38e52a39d20ecafe30147dd1c392eb1dacae3bfe9fa83359b7048e0773e567714ac6199b9e71ed92538565f3aa67b34454d41711d16bfe9de9af7c7272f8b08940564744636e16d51e57cefa3")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  391.205625] binder: 25325:25331 unknown command 1076585233
[  391.229734] binder: 25325:25331 ioctl c0306201 20000300 returned -22
[  391.243017] binder: 25333:25339 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:46 executing program 5:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000480)={0xfffffffffffffc01, 0x9, 0x1})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x40002, 0x100)
statx(r2, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x40, &(0x7f0000000100))
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000340)="5d12d00a1bcead298a11d77da4bb5507a50dbc4d71cc72f7832d24d0fda35aabe298bfc1234a06090ee7f51b95ffe8deee890adaae92928fb8d80c29ead3053bb025e2c550af1a938ac22bf4e2241824443d1a1be24d80ea7f040b9327f4888b12b62930d131136915cb8ef4b400b582464b8abca7cd9ba567114405411f985b4863ac663945f8fa3aa3fabb18af8d6ccb86de46811c2e95e2"}, 0x10)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U+', 0x6}, 0x28, 0x3)
write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x2, 0xfffffffffffffff9, 0x5, 0x2, 0x0, 0x7, 0xcf, 0x60, 0x40, 0x2b7, 0x10001, 0x6, 0x38, 0x2, 0x8000, 0x6, 0x2}, [{0x3, 0x1, 0x288, 0x40, 0x101, 0x0, 0x3, 0x20000000}], "0ed032a0184cb0f2817b4f930bd7d56fe49f608912070a7d5ec59f66526ba6c8e95d2287d468812c02a29abc4055b2b783da70d2ed3980e8cbe6a8d233cdee9a591e3880e037bdbab99e135ca1ece758b3925111c09c7d497b"}, 0xd1)

[  391.260879] binder: 25333:25339 got reply transaction with no transaction stack
[  391.273532] binder: 25333:25339 transaction failed 29201/-71, size 40-40 line 2926
07:02:46 executing program 4:
clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getrule={0x20, 0x22, 0x20, 0x70bd2a, 0x25dfdbff, {0x2, 0x20, 0x20, 0x4, 0x1ff, 0x0, 0x0, 0x2, 0x2}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
read$eventfd(r0, &(0x7f0000000000), 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000280)="dc97ac273da140a4ec48c5de680cb335b503a205bb9a27a4b7c61c146a4a836873ee223e3eb6e4feb67c37bfc67ed29d86892124eea85fc03f44c4766b5be501faaeef0e2b96c74a0e9b6b85", &(0x7f0000000300)=""/231}, 0x18)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xb9, 0x6})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x6, 0x9, 0x4, 0x0, 0x0, [{r0, 0x0, 0x64f37202}, {r0, 0x0, 0x6}, {r0, 0x0, 0x7ff}, {r0, 0x0, 0x6}]})

07:02:46 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x480200)
fcntl$setstatus(r0, 0x4, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840aac49ab46fe121f82999b2aa824be4ffb1c5a6134902351fafc1229a149456e8c6933a0c2e2924019cabb3884c1887b885685a29ae40381cb30db5a9e1b160d3232534dcb08c50733166248555808d77f1163d046f8953ee29514a4c2592fb56127f2e870c043bc098e17fd16dcf402a48303b70a5788c65b6d502ddc4e23bac6966e1334b45e46d5f3d4e7afb45897f51b72d58b329a875d9059274bdbe1c3ec37f4682f76f23e9e95dd8d61095be9dc46cd0864561ea33558e054f4c42e102b668faaf531cc565940efb753bc192ab0a8bb07f"], 0x0, 0x0, 0x0})

07:02:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_FPEMU(0xa, 0x2)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x80800)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0), 0x4)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  391.939622] binder: 25352:25358 got transaction to invalid handle
[  391.946298] binder: 25352:25358 transaction failed 29201/-22, size 82235970949911494--5150120931884815460 line 3018
[  391.977888] binder: undelivered TRANSACTION_ERROR: 29201
07:02:46 executing program 2:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
sched_getparam(r0, &(0x7f0000000000))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:46 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x9, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r1, 0x0)
keyctl$clear(0x7, r2)

07:02:46 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x875, 0xaad, 0xfffffffffffffff8, 0x7fff, 0x8, 0x3, 0x6, 0x6, 0x2f, 0x38, 0x291, 0x7d, 0x95fd, 0x20, 0x2, 0x8, 0xffffffffffffff81, 0x3}, [{0x6474e551, 0xffffffff, 0x1, 0x5, 0x54, 0xfffffffffffffffb, 0x1, 0x7}, {0x0, 0x1000, 0x1800000000000000, 0x8886, 0x8, 0xff, 0x7, 0x401}], "c73a3bc238c46b49c130c326ef20acaf82cf8b41666e74bb0f0736c03a6a2f0c98b014ee8ef8"}, 0x9e)

07:02:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)

07:02:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  392.110412] binder: 25379:25382 got transaction to invalid handle
[  392.117204] binder: 25379:25382 transaction failed 29201/-22, size 0-0 line 3018
[  392.147140] binder: undelivered TRANSACTION_ERROR: 29201
07:02:47 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000100)='oom_adj\x00\xcd\a\x93}\xc0Y\xea\x9f\xbb~\x1e\xfa\xa8\x96\xcf\xd6E@\xd4\x80\xb2\x15+\x98Rgj\t\xf6]+\xfe\x9f\xcc\xc6\xa7-PFZ\x81W\x85g\xc2\x8fY\xba\xb0;\t\xe7)\xbc\xef9g\xdb\xd8|\x90y\xa1\xa1\xebx\xd9\xda\x8b\xc5\xab\x03\x9b\xbb+\xab3\xe1\t\xc6\xde\xdb\x99\xacr\x82\x12\xea\x03\x10\xe4\xbe\x01H\x1en9o\x06\x0e\xcb\xf9\x15*1\xaf\xf6w\xee\x14\"yg\xe3\xd8k\xe5/Bw\xe7\r\x7f\xb7\xa1\v\x163&\x9f|\xf7\xc7\xa2gh\x06\xf4\xfe0')
exit(0x0)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0xbdd}, {0xa, 0x4e23, 0x6, @mcast1, 0xb6750000}, 0x7, [0x1, 0x7fffffff, 0x0, 0x0, 0x100000000, 0x800, 0x1a, 0x5]}, 0x5c)
sendfile(r3, r3, 0x0, 0x3)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000080))

07:02:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:47 executing program 0:
clone(0x8000004000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x28800, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:02:47 executing program 5:
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10001, 0x100)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  392.777358] binder: 25412:25420 got transaction to invalid handle
[  392.784046] binder: 25412:25420 transaction failed 29201/-22, size 0-0 line 3018
[  392.822499] binder: undelivered TRANSACTION_ERROR: 29201
07:02:47 executing program 2:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x6004, 0x0)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getuid()
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188c5df")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040))

07:02:47 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @multicast2}}}, 0x108)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x2, 0x4, 0x8001, 0x20, r1})
sendfile(r0, r0, 0x0, 0x3)

07:02:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="076304400400000006630440010000000563044000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a443d04c31285ee83875443fa6c412e64cd9bd50d00000000000000b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  393.031481] binder: 25433:25437 got transaction to invalid handle
[  393.039388] binder: 25433:25437 transaction failed 29201/-22, size 0-0 line 3018
[  393.060796] binder: 25433:25437 ioctl 127a 20000040 returned -22
07:02:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x100000001, @loopback, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast1, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x400, 0x7}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0)

07:02:47 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
getsockname(r0, &(0x7f00000000c0)=@can={0x1d, <r2=>0x0}, &(0x7f0000000040)=0x80)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}, 0x4e23, 0x3, 0x4e24, 0x3, 0xa, 0x80, 0xa0, 0x16, r2, r3}, {0x9, 0x5, 0x7, 0xfffffffffffffff9, 0x3, 0xfffffffffffffff8, 0x7, 0x1}, {0x3, 0x411cd89a, 0x8000, 0x8}, 0x80000001, 0x6e6bb6, 0x1, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x2, 0x0, 0x765e, 0xffffffff7fffffff, 0x7, 0x4}}, 0xe8)

[  393.088878] binder: undelivered TRANSACTION_ERROR: 29201
[  393.154695] binder: 25454:25461 got transaction to invalid handle
[  393.161587] binder: 25454:25461 transaction failed 29201/-22, size 0-0 line 3018
[  393.185534] binder: undelivered TRANSACTION_ERROR: 29201
07:02:48 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x402080, 0x0)
dup(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:02:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:02:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
finit_module(r1, &(0x7f0000000040)='\'em1\x00', 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0x8b)

[  393.589357] binder: 25473:25475 ioctl c0306201 0 returned -14
07:02:48 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))

07:02:48 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000))
sendfile(r0, r0, 0x0, 0x3)

07:02:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = creat(&(0x7f0000000080)='./file0\x00', 0xb0)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0xfffffffffffffff8)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:48 executing program 2:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r0=>0x0)
sched_getscheduler(r0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:02:48 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
futex(&(0x7f00000000c0), 0x4, 0x0, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f0000000180), 0x1)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x1, 0x4}, {0xfff, 0x2}]}, 0x14, 0x2)

07:02:48 executing program 5:
r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0)
fcntl$getown(r0, 0x9)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20001, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100), 0x4)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x81, 0x3, 0x0, 0x6d4}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="00fbac0140c1f0f18488934e665497465c0e0f4c1fd0fc604eb95b7f4dc9c698df068331c94f0d7a16a68fd50ebf007f4fdf4255510329060cb0c3e77a92fad0e8e70137ba254685c7c45a45c41fd6517c63aa2de0f02e299c49b87ce32387cd5709eedd1ae0e095069b9b6ad5f41153ea74541a7a36d9669303e63f2681f81198359232f3506686f8db7234448b7e6a11255747312af60a69887db75273bf284935896862acc567efbfe845"], 0xac, 0x1)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r4=>0x0, @empty, @multicast2}, &(0x7f0000000200)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0xa0, 0x29, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, r4, {0xffe9, 0x8}, {0x6, 0xf}, {0x5, 0xd}}, [@tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x3}}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x40}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x24, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfd}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000001}, 0x24004000)

07:02:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:02:48 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x20)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000280)=0x8, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pselect6(0x40, &(0x7f0000000000)={0x9, 0x6, 0x9, 0x8, 0x3, 0x2, 0xffffffff, 0x800}, &(0x7f0000000080)={0x5, 0x99ed, 0x4, 0x8, 0x101, 0x80000000, 0x3, 0xffff}, &(0x7f00000000c0)={0x9, 0x9b8, 0x1, 0x1, 0x0, 0x2, 0x6, 0x1}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180)={0x1}, 0x8})
fadvise64(r0, 0xffff, 0xb1c4, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
prctl$PR_CAPBSET_READ(0x17, 0x10)

[  394.013029] binder: 25488:25494 got transaction to invalid handle
[  394.020623] binder: 25491:25495 ioctl c0306201 0 returned -14
[  394.021715] binder: 25488:25494 transaction failed 29201/-22, size 0-0 line 3018
[  394.047099] binder: undelivered TRANSACTION_ERROR: 29201
07:02:48 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:48 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x307}, 0x2, {0x2, 0x4e24, @local}, 'bcsf0\x00'})

07:02:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:49 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x7, 0xffffffffffffffc8}]}, 0xc, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="117b4840aa"], 0x0, 0x0, 0x0})
r2 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffa)
r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, r2, 0x4, 0x2, r3)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

07:02:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
r1 = socket(0x0, 0x6, 0x3)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x310, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0xfffffffffffffff7, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x5)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x4000, 0x0)
ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000200)=""/157)

07:02:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  394.091725] binder: 25510:25514 got transaction to invalid handle
[  394.096434] binder: 25508:25515 ioctl c0306201 0 returned -14
[  394.125957] binder: 25510:25514 transaction failed 29201/-22, size 0-0 line 3018
[  394.190731] binder: undelivered TRANSACTION_ERROR: 29201
[  394.207098] binder: 25540:25544 unknown command 1078491921
[  394.217260] binder: 25540:25544 ioctl c0306201 20000300 returned -22
07:02:49 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ustat(0xffffffffffffff01, &(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r0=>0x0)
ptrace$setsig(0x4203, r0, 0x7, &(0x7f0000000040)={0x38, 0x40f, 0x8})
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:49 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
setsockopt$inet6_int(r0, 0x29, 0xf, &(0x7f0000000140)=0x7fff, 0x4)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@remote]})
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x40, 0x80000, 0x4, 0x1ff, 0x5879d29a, 0x3f, 0x0, 0x8, 0x4e, 0x7, 0x100, 0x2, 0xf08a, 0x9, 0x8, 0x101, 0x6, 0x8, 0x9, 0x5, 0xf3f1, 0x2e79, 0x1f, 0x1ff, 0x104, 0xff, 0x0, 0xd40e, 0xae0, 0x7, 0x6562, 0x0, 0x7ff, 0x3, @perf_bp={&(0x7f0000000000), 0xd}, 0x100, 0x3, 0x5, 0xb, 0x5, 0x80000000, 0xfffffffffffffffd}, r1, 0xc, 0xffffffffffffffff, 0xa)

07:02:49 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0b429d69420100045596f712005dd6c6517817a99c9ffd1fa371080924f672d17d414d19e4898bfb0c106883b123df240d32438cfce3bf2cb9eb3f3200000000000000", @ANYRES16=r1, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
sendfile(r0, r0, 0x0, 0x3)

07:02:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:49 executing program 1:
getitimer(0x1, &(0x7f0000000140))
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000000)=0x1, 0x8f, 0x2, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)

07:02:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x28, &(0x7f0000000080)={0x0, <r1=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x1f, 0x8}, 0xc)

07:02:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x81, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=<r2=>0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x3, 0xa4, 0x3, 0x9, 0x2, r2})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
fadvise64(r0, 0x0, 0x7, 0x7)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000140)=0x78)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$notify(r0, 0x402, 0x20)

07:02:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:50 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xe87}, 0x4)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:50 executing program 5:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'keyring\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, 'security'}, {0x20, 'md5sumppp0cgroupusersecurity'}, {}, {0x20, '/dev/binder#\x00'}, {}], 0xa, "fc9346dac61f470e9b10c14854c191f5599eb0634b4c5e71d4c50a0f20b032674a44ce485330fc22930d6f15bd4a0319573c4930ae7a73affd38673455b7174bd29ade846e146c3a2d07e50e4bc8d4c77924b81d42c97d048bc330de23937d902815cf90bdfb6d57b4e7f39f093838bffb619c03d471ca4a1e8c13b30307a739d58e072d22a36a72edb4b806e33f3469eec3929dd53a475a8e8cdcce425d4a4ceded3c4758203e33935f77e30415175e42cc9f106d79162c082850a01d6840"}, 0x141)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x202040, 0x100)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000280)={0x8, 0x9, 0xc4})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  395.148356] binder: 25566:25575 got transaction to invalid handle
[  395.157622] binder: 25566:25575 transaction failed 29201/-22, size 0-0 line 3018
07:02:50 executing program 1:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200400, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:50 executing program 4:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)

[  395.192841] binder: 25581:25591 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  395.205191] binder: 25581:25591 got reply transaction with no transaction stack
[  395.212669] binder: undelivered TRANSACTION_ERROR: 29201
[  395.240395] binder: 25581:25591 transaction failed 29201/-71, size 40-40 line 2926
[  395.302983] binder: 25600:25606 got transaction to invalid handle
[  395.309943] binder: 25600:25606 transaction failed 29201/-22, size 0-0 line 3018
[  395.336600] binder: undelivered TRANSACTION_ERROR: 29201
07:02:51 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x164, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x98}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4125}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbb}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x130, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffffffff8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x9}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffffa3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x4)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:51 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0)
readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/170, 0xaa)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xb0)

07:02:51 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/4)
sendfile(r0, r0, 0x0, 0x3)

07:02:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x2, 0x7})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0))

07:02:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a2bf800000000e741b81d265f9be097afaa1113eb3aae6ed0fe256faafd2707bbd7af7bc741119c5eaa6fb6db1a5753d17ac4ba17b86ea1cbdc85644e3ab07365864bba4bb85a3206ac4b09ee45d91b3f00000000030000e88be4c31aa3bd97266e798a637f3eaa46e2be69f654dd8366a232986d40b1485fd58acc4124828fbbc398ce7766ebe5e6e8", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000001d00000000000000"]], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:51 executing program 1:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x302f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348012733ade7c520f85a3a031245bec900"], 0x0, 0x0, 0x0})

07:02:51 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/ip6_tables_names\x00')
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x308, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000001c0)={0x6, 0x4, 0x9})
sendfile(r0, r0, 0x0, 0xad)

[  396.177394] binder: 25627:25630 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  396.184933] binder: 25627:25630 got reply transaction with no transaction stack
[  396.195114] binder: 25627:25630 transaction failed 29201/-71, size 40-40 line 2926
07:02:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

07:02:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040000000000000000001000000000000000000000001000000000000000000000028000000000000002800000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:51 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x3)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
r3 = getuid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, <r5=>0x0}, &(0x7f00000003c0)=0xc)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x3}, [{0x2, 0x3, r1}, {0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x6, r5}, {0x2, 0x4, r6}], {0x4, 0x5}, [{0x8, 0x2, r7}, {0x8, 0x6, r8}], {0x10, 0x3}, {0x20, 0x1}}, 0x64, 0x3)

[  396.224688] binder: 25626:25633 unknown command 21521169
[  396.235438] binder: 25626:25633 ioctl c0306201 20000300 returned -22
[  396.267605] binder: 25626:25658 unknown command 21521169
07:02:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8082, 0x0)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:51 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0xad)

[  396.285972] binder: 25626:25658 ioctl c0306201 20000300 returned -22
[  396.305070] binder: 25657:25663 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  396.341889] binder: 25657:25663 got reply transaction with no transaction stack
[  396.359532] binder: 25657:25663 transaction failed 29201/-71, size 40-40 line 2926
[  396.372804] binder: 25671:25677 got transaction to invalid handle
[  396.379085] binder: 25671:25677 transaction failed 29201/-22, size 0-0 line 3018
[  396.410994] binder: undelivered TRANSACTION_ERROR: 29201
07:02:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2)

07:02:51 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:51 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)="10bcec43ed4c033b5bc18fc953dcafb0d51a7bd7bb500b9187f620ba312fd47533ca891ed331616f62fe5c6c885be99ad32e6acc1873d69e6e85d5e5fc168b889df64044f82c7fc5a4b8e27f4cac648f06e7f106a54a02db4708250140183c40b0c121fcb4f1230d41", 0x69, 0xfffffffffffffffd)
r1 = getpgrp(0xffffffffffffffff)
wait4(r1, &(0x7f0000000180), 0x80000001, 0x0)

07:02:51 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000140)='stack\x00')
r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='@+\'[\x00', 0xfffffffffffffffd)
keyctl$clear(0x7, r2)
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:02:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:51 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

[  397.030126] binder: 25696:25700 got transaction to invalid handle
[  397.038849] binder: 25696:25700 transaction failed 29201/-22, size 0-0 line 3018
07:02:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3488b0a6")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:51 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup2(r1, r1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={<r3=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={<r4=>0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x114, 0x0, &(0x7f0000000340)=[@increfs, @clear_death={0x400c630f, 0x4, 0x4}, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0]}, 0x8}}, @register_looper, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000140), &(0x7f0000000180)=[0x78, 0x40, 0x38, 0x20, 0x20]}}, @free_buffer={0x40086303, r3}, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000280)=[@flat={0x776a2a85, 0xa, r4, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x1, 0x1, 0x2a}], &(0x7f00000002c0)=[0x28, 0x58]}}], 0x3c, 0x0, &(0x7f0000000480)="ebb0a1e45c6b16da7c37d03deb176e0c4e59d5f4bc2e0e605564392e517637fb8bdd7db74b584235a3efaa991ce31613136d121a0d28660f9d8e497f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11464840aa46e6a02e86ca27a497ed6c57655d15e231ee"], 0x0, 0x0, 0x0})

07:02:52 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x9)

[  397.101048] binder: undelivered TRANSACTION_ERROR: 29201
07:02:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:52 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
sendfile(r0, r0, 0x0, 0xad)

07:02:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x10)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, <r3=>r1, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000340))
ioctl$VT_RELDISP(r0, 0x5605)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000200)={0xffffffff80000000, {{0x2, 0x4e20, @rand_addr=0xfffffffffffffff8}}}, 0x88)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@empty, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000400)={0x100000000, 0x7, 0x614, 0xffffffffffffff80, 0x2, 0x2})

07:02:52 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
sendfile(r0, r0, 0x0, 0xad)

[  397.182680] binder: 25719:25726 unknown command 1078478353
[  397.199092] binder: 25719:25726 ioctl c0306201 20000300 returned -22
07:02:52 executing program 2:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev}, &(0x7f0000000480)=0xc)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x4, 0xfff)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="773d211c54e5f2d4a54b6b220a7084d385c106547b984dae23581328615c94689ebce71c61b05ff8b0e77fe19eda9425f43f185f027426cac3b97bd6ed864921013cf2b5373df8240debdc1c0492da8a8b0388efd9a3009a59cc12f5c014fff7560b82d4874b43ae91bde2581638e2a33868569c197ca85b9d59488ae084ec395c28d2dd6b8c3518cd2495087bb735894b9680d4bc3422adb793f727ca", @ANYRES16=r3, @ANYBLOB="00052dbd7000fedbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000100)=0xe8)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000140)={@loopback, r4}, 0x14)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:52 executing program 1:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1e, &(0x7f0000000080)='/selinux/commit_pending_bools\x00'}, 0x30)
r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/sockstat\x00')
r2 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840d08aa80272f34e4110329f2049ced7aa"], 0x0, 0x0, 0x0})
read(r3, &(0x7f0000000140)=""/210, 0xd2)

07:02:52 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xc82)
sendfile(r0, r0, 0x0, 0xad)

07:02:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:52 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
sendfile(r0, r0, 0x0, 0xad)

07:02:52 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
socket$inet(0x2, 0x4, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:52 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  397.342379] binder: 25757:25762 got transaction to invalid handle
[  397.359308] binder: 25757:25762 transaction failed 29201/-22, size 0-0 line 3018
07:02:52 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  398.146110] binder: undelivered TRANSACTION_ERROR: 29201
07:02:53 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:53 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000000)={0x415c, 0xa, 0x1, <r0=>0xffffffffffffffff})
r1 = inotify_init1(0x80000)
tee(r0, r1, 0x17b1, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r2, r2, 0x0, 0xad)

07:02:53 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad)

07:02:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x26, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c6300000163404000000000000000000100"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:53 executing program 5:
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x802, 0x0)
dup3(r0, r1, 0x80000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:53 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r1=>0x0, @broadcast, @dev}, &(0x7f00000000c0)=0xc)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@mcast1, r1}, 0x14)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:53 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad)

07:02:53 executing program 0:
clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='stack\x00')
exit(0xfffffffffffffffe)
prctl$PR_GET_KEEPCAPS(0x7)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000380))
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e24}})
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100))

[  398.339661] binder: 25812:25821 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  398.353124] binder: 25815:25822 got transaction to invalid handle
[  398.365290] binder: 25815:25822 transaction failed 29201/-22, size 0-0 line 3018
07:02:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  398.384395] binder: 25812:25821 got reply transaction with no transaction stack
07:02:53 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad)

07:02:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x2, 0x300)
r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x194)
execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='/dev/binder#\x00', &(0x7f0000000140)='/dev/binder#\x00', &(0x7f0000000180)='{\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='cpusettrustedcgroup]\'lo\x00', &(0x7f0000000240)='\x8a.cgroup\x00', &(0x7f0000000280)='/dev/binder#\x00'], &(0x7f00000004c0)=[&(0x7f0000000300)='/dev/binder#\x00', &(0x7f0000000340)='wlan1--\x00', &(0x7f0000000380)='md5sum\x00', &(0x7f00000003c0)='/dev/binder#\x00', &(0x7f0000000400)='/dev/binder#\x00', &(0x7f0000000440)='{*/wlan0*/$\x00', &(0x7f0000000480)='cpuset\x00'], 0x500)

[  398.425344] binder: 25812:25821 transaction failed 29201/-71, size 0-0 line 2926
[  398.432790] binder: 25815:25838 got transaction to invalid handle
[  398.458291] binder: 25815:25838 transaction failed 29201/-22, size 0-0 line 3018
[  398.515664] binder: undelivered TRANSACTION_ERROR: 29201
[  398.554336] binder: undelivered TRANSACTION_ERROR: 29201
07:02:54 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
ptrace$pokeuser(0x6, r0, 0x9, 0x3e)
wait4(r0, &(0x7f0000000000), 0x80000002, 0x0)

07:02:54 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:54 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})

07:02:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0))

07:02:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  399.404976] binder: 25864:25871 got transaction to invalid handle
[  399.411755] binder: 25864:25871 transaction failed 29201/-22, size 0-0 line 3018
[  399.435141] binder: 25864:25871 got transaction to invalid handle
07:02:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0)
r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x113, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  399.450185] binder: 25864:25871 transaction failed 29201/-22, size 0-0 line 3018
[  399.461186] binder: undelivered TRANSACTION_ERROR: 29201
[  399.467168] binder: undelivered TRANSACTION_ERROR: 29201
07:02:54 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:02:54 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11634840aa"], 0x0, 0x0, 0x0})
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xc9ed)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xffffffffffff7fff)

07:02:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x13, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:54 executing program 5:
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ppoll(&(0x7f00000000c0)=[{r0, 0x83}, {r0, 0x2000}, {r0, 0x8}], 0x3, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x6}, 0x8)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x26800, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:02:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x13, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  399.559787] binder: 25889:25892 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  399.568778] binder: 25888:25893 got transaction to invalid handle
[  399.583841] binder: 25888:25893 transaction failed 29201/-22, size 0-0 line 3018
[  399.604656] binder: undelivered TRANSACTION_ERROR: 29201
07:02:54 executing program 2:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

[  399.634167] binder: 25904:25907 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:55 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:55 executing program 0:
sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000))
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:02:55 executing program 1:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
rmdir(&(0x7f0000001540)='./file0/file0\x00')
ftruncate(r0, 0x8001)
rmdir(&(0x7f0000000400)='./file0\x00')

07:02:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x13, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x8000, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x4ac95da634f76e51, 0x4)

07:02:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x4000)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00')
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x1, 0x2)
r8 = dup(r0)
r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x400000, 0x0)
r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/mls\x00', 0x0, 0x0)
r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/status\x00', 0x0, 0x0)
pipe(&(0x7f0000001840)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = dup(r0)
r14 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001880)='/selinux/checkreqprot\x00', 0x0, 0x0)
r15 = open(&(0x7f00000018c0)='./file0\x00', 0x20102, 0x108)
r16 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001900)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r17 = socket(0x3, 0x80005, 0x1)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xcc, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2b}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r17}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

07:02:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200))
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x31d0f49d38a75eaf)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0xc334, 0xf2, "b8be13daeb0778f3a4f87cd23687b2c70db0312cb16d704390ddff568c4bb0d0f215ea59b341622762219c6125cba0c1a583ea3bd18af3b17300bcfbd895972e218bc7421e70cc54e35cce234b38029d35714b4c8d69384ae7d9c5be703028f15a942b03bf84c192ba42b3f2ac95e471fee8c3f8dfdd7d099a525684be83500240f4daa1196e223640d705cfef796247d22abbdc2482619259a9df739cdcf24618b21331bab2ecbe43ad4fd5ee49306764740e87a1057dfa5861a4b10228cdbc8227483de142f6d9afdb5f757003af83514daf7ae6a65b509a41fb109535dfcde7d0824a233615ec168c2f7b635991b32c02"})
close(r4)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
getpgid(0xffffffffffffffff)
sendmmsg(r3, &(0x7f0000007e00), 0x26e, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffff8004500005c0000000000019078ac2314bbac1414110504907800000000400000000000000000040000ac2314aaac141400082c0000000000000000000000e000000100000000000000007f000001000000000005000000000000000000"], 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000380))

07:02:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1d, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c6300000163404000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  400.223238] binder: 25917:25920 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:55 executing program 0:
clone(0x8400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff)
exit(0xfffffffffffffffd)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x1, 0x9, 0x1, 0x543, 0x4924924924924b5, [{0x4, 0x2, 0x401, 0x0, 0x0, 0x100}, {0x5, 0x5, 0x6, 0x0, 0x0, 0x2400}, {0x2, 0x81, 0x5, 0x0, 0x0, 0x1004}, {0x2, 0x80000000, 0x10001, 0x0, 0x0, 0x2000}, {0x9, 0x2, 0x6, 0x0, 0x0, 0x400}, {0x1000, 0x10d, 0x1, 0x0, 0x0, 0x104}, {0x4, 0x5, 0x3, 0x0, 0x0, 0x8}, {0xffffffffffffe4ea, 0x4, 0x5, 0x0, 0x0, 0x4}]})
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0xfffffffffffff230, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x88)
sendfile(r0, r0, 0x0, 0xad)

07:02:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c40010000000200000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)

[  400.278834] binder: 25939:25940 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  400.289358] binder: 25939:25940 got reply transaction with no transaction stack
[  400.299602] binder: 25939:25940 transaction failed 29201/-71, size 0-0 line 2926
[  400.354576] binder: 25948:25953 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:55 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100))
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000140)={0x0, <r0=>0x0})
wait4(r0, &(0x7f00000001c0), 0x80000002, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x6, 0xff, 0xfff}, {0xfffffffffffffff8, 0x6, 0x9, 0x8}, {0x4, 0x6, 0x8, 0x47f8}, {0x9, 0x80000001, 0x26d, 0x1}, {0x8, 0x0, 0x3, 0x1ff}, {0xffffffff, 0xfff, 0x0, 0x1}, {0xffffffffffffd07d, 0x401, 0x7, 0x6}]})
socket$inet6_udp(0xa, 0x2, 0x0)

[  400.831065] syz-executor.1 (25935) used greatest stack depth: 23584 bytes left
07:02:55 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c40010000000200000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x40001000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
timer_create(0x6, &(0x7f0000000240)={0x0, 0x2c, 0x1, @thr={&(0x7f0000000080)="c12885737f1e7b6481c664a2f934876548ef0431ad60d3a9837715c2fcd3e4d6abc42f6ffd22329f237e64b61d2f3689210f3a2d6cc5612ab6c1158f0ad172d731161535b2f22beca5aaf0d88a32297c2a8e124b9b667a087cac622bc8735e0b83bae8a9dcac9857450e199a9d6d4c8e15c253f9e8f571f93961bf78a2543b38e2905116f83f0ec04314676a66777855bd3288e08166dff83ef24201507949d5014eba41155be63ce5fdb5b4a56043b9da76b0c7f6a7d42c2fc1dd5ff1e7611f881c111a05b034ccc8ec4a3468d55fb23fcff4192007e9785104c9cd2f5fc7b7984cb43c6163ddfe12182c82a814b1965ad4b86b", &(0x7f0000000180)="6e1f85a7929315d9519e0ebc53862482f8986d6016565734b06daaa964ed9313a9da05aa83f1c6466453fd88c350ff233aeac07d57bdd4de056111d78c2a79591540930e2f4960f8dbd3da6297fe82cd8967492b68318601cc93e305299a1c3bf5bc4fe037d2a542f9da2af12a5deda99fc585da4f513e3d6603dd5d2aae98f993fe9fe62c470dcdedea3b"}}, &(0x7f0000000280))
keyctl$session_to_parent(0x12)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f00000002c0)="a70ac400854566ea7694a802c2282516a3ff95d2e2c5097a22409db7dd113a5138d05e66ea413f2f853665d157638aceb2c3d50b907cb170701b45fd577af306f7b9af5d60deb2bd513596e11b8fe7ead9a9b19bdfce5d92e4dece2d5930b78be890275ae3d1f2e6fd90d9bc74e1cbbc33530633e5ec0229b4ad2318014583cc58117b6bdf5d4f43815600d23d9a8ef0d6fb62245d50c100fb15d24c1e5255b181b34e68ff7ff1d627f77475812557ca9de5277ac2f4195784", 0xb9, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

07:02:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200))
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x31d0f49d38a75eaf)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0xc334, 0xf2, "b8be13daeb0778f3a4f87cd23687b2c70db0312cb16d704390ddff568c4bb0d0f215ea59b341622762219c6125cba0c1a583ea3bd18af3b17300bcfbd895972e218bc7421e70cc54e35cce234b38029d35714b4c8d69384ae7d9c5be703028f15a942b03bf84c192ba42b3f2ac95e471fee8c3f8dfdd7d099a525684be83500240f4daa1196e223640d705cfef796247d22abbdc2482619259a9df739cdcf24618b21331bab2ecbe43ad4fd5ee49306764740e87a1057dfa5861a4b10228cdbc8227483de142f6d9afdb5f757003af83514daf7ae6a65b509a41fb109535dfcde7d0824a233615ec168c2f7b635991b32c02"})
close(r4)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
getpgid(0xffffffffffffffff)
sendmmsg(r3, &(0x7f0000007e00), 0x26e, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffff8004500005c0000000000019078ac2314bbac1414110504907800000000400000000000000000040000ac2314aaac141400082c0000000000000000000000e000000100000000000000007f000001000000000005000000000000000000"], 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000380))

07:02:55 executing program 5:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200))
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x31d0f49d38a75eaf)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0xc334, 0xf2, "b8be13daeb0778f3a4f87cd23687b2c70db0312cb16d704390ddff568c4bb0d0f215ea59b341622762219c6125cba0c1a583ea3bd18af3b17300bcfbd895972e218bc7421e70cc54e35cce234b38029d35714b4c8d69384ae7d9c5be703028f15a942b03bf84c192ba42b3f2ac95e471fee8c3f8dfdd7d099a525684be83500240f4daa1196e223640d705cfef796247d22abbdc2482619259a9df739cdcf24618b21331bab2ecbe43ad4fd5ee49306764740e87a1057dfa5861a4b10228cdbc8227483de142f6d9afdb5f757003af83514daf7ae6a65b509a41fb109535dfcde7d0824a233615ec168c2f7b635991b32c02"})
close(r4)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
getpgid(0xffffffffffffffff)
sendmmsg(r3, &(0x7f0000007e00), 0x26e, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffff8004500005c0000000000019078ac2314bbac1414110504907800000000400000000000000000040000ac2314aaac141400082c0000000000000000000000e000000100000000000000007f000001000000000005000000000000000000"], 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000380))

07:02:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c40010000000200000000000000"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  401.082812] binder: 25971:25979 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x19, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:56 executing program 0:
clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

[  401.123368] binder: 25982:25985 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x19, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:56 executing program 0:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x40)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x105, 0x4, 0x3, "74aaac719da1e68c124e903958df5c05", "481688befa2a9b831b4bd0fbf7ac2db51deea20cb7f7a121d2a0872f459150fa7d6cb9d2b8a203afc698ded56e592d49b560a77d889bc9a291a985f0726169e4dff7feadcbdba29a8385a230629d0704230e8bdbaaef017b646200fa9ee97a7035a4ea149421bb72afcb52b0138a8cc9b0fcb95985f3c6cc1329e6c4b392fb4ae3fd241c8dc17c9caa2616b0c3c3a218f9fa4a009223323d8d2d43ded797c17d674a38c6b17c07f9372cc7de3f6ffc252bbaacf5784d054ddba32eeaf99b0c21d4924b0d8e688cd91953ccea20e306df385105e5c35a4ea69c8063dcf73223613b99b88fe592947bd1bb2e20426d42f1"}, 0x105, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0xb00, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a55}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)

[  401.186107] binder: 25991:25999 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  401.196190] binder: 25991:25999 unknown command 1
[  401.202283] binder: 25991:25999 ioctl c0306201 20000280 returned -22
07:02:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x19, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  401.263186] binder: 26004:26006 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  401.286096] binder: 26004:26006 unknown command 1
[  401.298452] binder: 26004:26006 ioctl c0306201 20000280 returned -22
[  401.366354] binder: 26013:26016 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  401.386832] binder: 26013:26016 unknown command 1
[  401.400646] binder: 26013:26016 ioctl c0306201 20000280 returned -22
07:02:56 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvfrom$inet(r0, &(0x7f0000000040)=""/15, 0xf, 0x10021, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

07:02:56 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:56 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x100000ad)

07:02:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:56 executing program 1:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8)
io_setup(0x1, &(0x7f0000000180))
r0 = socket(0x10, 0x2, 0x0)
r1 = dup(r0)
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x2a, 0x29, 0x1, {0x83, [{{0x40, 0x4}, 0x4, 0x9, 0x7, './file0'}]}}, 0x2a)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x414, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x10)
setresuid(0x0, 0x0, 0x0)
exit_group(0x0)
ioprio_set$pid(0x2, 0x0, 0x0)

07:02:56 executing program 5:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200))
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x31d0f49d38a75eaf)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0xc334, 0xf2, "b8be13daeb0778f3a4f87cd23687b2c70db0312cb16d704390ddff568c4bb0d0f215ea59b341622762219c6125cba0c1a583ea3bd18af3b17300bcfbd895972e218bc7421e70cc54e35cce234b38029d35714b4c8d69384ae7d9c5be703028f15a942b03bf84c192ba42b3f2ac95e471fee8c3f8dfdd7d099a525684be83500240f4daa1196e223640d705cfef796247d22abbdc2482619259a9df739cdcf24618b21331bab2ecbe43ad4fd5ee49306764740e87a1057dfa5861a4b10228cdbc8227483de142f6d9afdb5f757003af83514daf7ae6a65b509a41fb109535dfcde7d0824a233615ec168c2f7b635991b32c02"})
close(r4)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
getpgid(0xffffffffffffffff)
sendmmsg(r3, &(0x7f0000007e00), 0x26e, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffff8004500005c0000000000019078ac2314bbac1414110504907800000000400000000000000000040000ac2314aaac141400082c0000000000000000000000e000000100000000000000007f000001000000000005000000000000000000"], 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000380))

[  401.931645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=297 sclass=netlink_route_socket pig=26034 comm=syz-executor.1
[  401.942624] binder: 26025:26037 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  401.955098] binder: 26025:26037 unknown command 4219649
[  401.961829] binder: 26025:26037 ioctl c0306201 20000280 returned -22
07:02:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:56 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xad)

[  401.990405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26034 comm=syz-executor.1
[  402.014376] binder: 26044:26048 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:02:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  402.043445] binder: 26044:26048 unknown command 4219649
[  402.059905] binder: 26044:26048 ioctl c0306201 20000280 returned -22
07:02:57 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/3)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_emit_ethernet(0x37, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4)
clone(0x400a300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setxattr$trusted_overlay_nlink(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='trusted.overlay.nlink\x00', &(0x7f0000001280)={'L-', 0x7fff}, 0x28, 0x2)
r5 = gettid()
setsockopt$inet6_tcp_int(r2, 0x6, 0x1d, &(0x7f0000000200), 0x4)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x26)
setsockopt$inet6_opts(r1, 0x29, 0x3e, 0x0, 0x12f)
sendfile(r0, r0, 0x0, 0xad)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r2, 0x0)
sysinfo(&(0x7f00000000c0)=""/4096)

07:02:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  402.107366] binder: 26056:26058 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  402.115776] binder: 26056:26058 unknown command 4219649
[  402.121675] binder: 26056:26058 ioctl c0306201 20000280 returned -22
07:02:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  402.180907] binder: 26061:26065 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  402.190831] binder: 26061:26065 got reply transaction with no transaction stack
[  402.199059] binder: 26061:26065 transaction failed 29201/-71, size 0-0 line 2926
[  402.264645] binder: 26068:26070 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  402.279593] binder: 26068:26070 unknown command 4219649
[  402.294788] binder: 26068:26070 ioctl c0306201 20000280 returned -22
[  402.356853] audit: type=1400 audit(1553151777.223:74): avc:  denied  { map } for  pid=26063 comm="syz-executor.0" path="socket:[69044]" dev="sockfs" ino=69044 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1
07:02:57 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:57 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

07:02:57 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

[  402.719146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=297 sclass=netlink_route_socket pig=26086 comm=syz-executor.1
[  402.726523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26085 comm=syz-executor.1
07:02:57 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:02:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:57 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev, @in6=@remote}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8)
sendfile(r0, r0, 0x0, 0xad)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}}, 0x4000)

07:02:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1b, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340"], 0xb7, 0x0, &(0x7f00000001c0)="2c92db278fe11ebe35224e54bcaa1a9e8efca06b4f6924a1195df6a1e013a6af4c232a3269c1c3bbb18922af6dfbbdfcc8f68103cb18209c8609be1857fe96bffcb83795b537c0939dc909c7c23bff5abaedd86d79c61c179ecb7b46867298c7fe4175ed6764b2cf1da06bc351d32a962eac80d1a8a01fd2cca1610590246addfa506034e872aa813d1072fe0641b1a003601ffa1152222cd5f558360d5e21f573d72e0656d7981febfcff3acffc9ea818ea5dc3da6225"})

[  402.767299] binder: 26089:26093 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  402.777830] binder: 26089:26093 unknown command 4219649
[  402.784133] binder: 26089:26093 ioctl c0306201 20000280 returned -22
07:02:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:02:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:57 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x53)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x2})
sendfile(r0, r0, 0x0, 0xad)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040010}, 0x1)
mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff)
fstat(r0, &(0x7f0000000280))

[  402.868067] binder: 26110:26115 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  402.882391] binder: 26110:26115 unknown command 4219649
[  402.888189] binder: 26110:26115 ioctl c0306201 20000280 returned -22
[  402.955690] binder: 26126:26130 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  402.973026] binder: 26126:26130 got reply transaction with no transaction stack
[  402.982219] binder: 26126:26130 transaction failed 29201/-71, size 0-0 line 2926
[  402.994965] binder: undelivered TRANSACTION_ERROR: 29201
[  403.002548] device lo entered promiscuous mode
07:02:58 executing program 2:
rt_sigsuspend(&(0x7f0000000080)={0x5}, 0x3a6)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0x1f)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:58 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x5, 0x3, 0x800, 0x9})
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000))
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x22c000, 0x0)
read(r2, &(0x7f0000000440)=""/238, 0xee)
r4 = getpgid(0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8, 0x401, 0x8000, 0x1400000000, 0x0, 0x1, 0x400, 0x0, 0x3, 0x1, 0x8, 0x1000, 0x2, 0x1ff, 0x6, 0x1, 0x0, 0x2, 0x5, 0x1, 0xffff, 0x4, 0x0, 0x100000000, 0x6, 0xffffffff, 0x5, 0x6, 0x100, 0x6ee0, 0x0, 0xfffffffffffffff7, 0x7, 0xffffffffffffff7b, 0x4, 0x9, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4, 0x5, 0x400, 0xf, 0x6, 0x47, 0x8}, r4, 0x8, r3, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffffc9, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d6300000e0002000000000100000c63000001634040000000000000f8438c81ccdc670e600df8b0c7d34d81d451e397579ee826a308804ec392235382096c71d275b98534ac186df74b1c57b1e4d0cc81aff4ecfe58ce49af4b0d79a8ccdf068d94fc98973f1475"], 0xfffffe6c, 0x0, 0x0})

[  403.611238] binder: 26148:26152 ioctl c0306201 200000c0 returned -14
[  403.619778] binder: 26148:26156 ioctl c0306201 200000c0 returned -14
07:02:58 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:02:58 executing program 0:
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0xffffffffffffff80, 0x2, 0x9, 0x7})
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000180)=""/38)
exit(0x0)
ioctl$TCXONC(r1, 0x540a, 0xfffffffffffff7fd)

07:02:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:58 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x109041, 0x0)
ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000040)="f9fc0ec07676862166c57b38c810654feec5259b0aee5674c0f1b9df991001121f790107ee17742ae19aabe2ff24ef23f970fbc1f70ec7fc842e763997b6c33d09150340cfe9b95a458f4c10f0ba4bd2da5bd36d4f417bec21fe925b0a89685368a8de6d67f8a3ef50ed73ed177d775015")
clone(0x1000200, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
fcntl$setstatus(r0, 0x4, 0x44800)

07:02:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="7513ec80866770950adc1f123c123f3188b070ddc57fd5ca91b0667143e33bcc34137745c0cf81693c128ee0ddcb63b182ec480a3a2a86066f4162e14e155aeb026faa49f24a662d465a292a1317d52bd60cb133730204c90bbd559fc5dd0f75610771367c0ef334e6b01050e2ce5e687f2319072e63e18c65ef90aaab8bda473db479")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0dceb4aa8efee9a5080000ffff000000000000000c63000001000089"], 0x0, 0x0, 0x0})

[  403.717369] device lo left promiscuous mode
[  403.722561] device lo entered promiscuous mode
07:02:58 executing program 0:
clone(0x202102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x1000000000e0)
mlockall(0x4)
sendfile(r0, r0, 0x0, 0xad)

07:02:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008914, &(0x7f00000000c0)="0adc1f123c123f08c8b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6320000e630c000c63000001634040"], 0x0, 0x0, 0x0})

07:02:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="c2fa5a9399a15e5d6c96821b69d0843f2e10c6222d0048d041c0b3104c24e8a419036318b296f03fd1b2f48d0c96497b935527c54526156ccb", 0x39, r0}, 0x68)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

[  403.785670] binder: 26163:26166 unknown command -1430991347
[  403.814014] binder: 26163:26166 ioctl c0306201 20000280 returned -22
[  403.913693] device lo left promiscuous mode
[  403.919918] binder: 26179:26187 unknown command 2122509
[  403.928181] binder: 26179:26187 ioctl c0306201 20000280 returned -22
[  403.939231] device lo entered promiscuous mode
07:02:59 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:59 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
fcntl$setpipe(r0, 0x407, 0xffff)
clock_adjtime(0x5, &(0x7f00000000c0)={0xfffffffffffffffb, 0xcdc, 0x5, 0x4, 0x5, 0x0, 0x8694, 0x2, 0x3, 0x9, 0x200, 0x1a, 0x0, 0xfffffffffffffff9, 0x2, 0x80000001, 0x9, 0x1, 0x7, 0xffffffffffffffff, 0x0, 0x800, 0x3, 0x471, 0x5, 0x5})
exit(0xfffffffffffffffc)
sendfile(r0, r0, 0x0, 0xad)
memfd_create(&(0x7f0000000000)='wlan0em0:bdev\x00', 0x2)

07:02:59 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:02:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4d093bef64e83fbd0d6300000e630c4001881146273d114698434c60c319d66900000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:02:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

[  404.632372] binder: 26220:26222 unknown command -281343667
[  404.639140] binder: 26220:26222 ioctl c0306201 20000280 returned -22
07:02:59 executing program 2:
clone(0x80000000, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:02:59 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:59 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
prctl$PR_MCE_KILL_GET(0x22)

07:02:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:02:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

[  404.731805] device lo left promiscuous mode
[  404.739453] device lo entered promiscuous mode
07:02:59 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

[  404.833702] binder: 26235:26241 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  404.858283] binder: 26235:26241 got reply transaction with no transaction stack
07:02:59 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(0x0, 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:02:59 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
sendfile(r0, r0, 0x0, 0xac)
fstat(r0, &(0x7f0000000000))

[  404.883551] binder: 26235:26241 transaction failed 29201/-71, size 0-0 line 2926
[  404.935575] binder: undelivered TRANSACTION_ERROR: 29201
07:03:00 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:00 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)

07:03:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl(r0, 0x1e68, &(0x7f0000000040)="0adc1f123c123f3188b070")
prctl$PR_GET_THP_DISABLE(0x2a)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ecfbe1e4", @ANYRES16=r2, @ANYRES16=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4000006)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080))
r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d6300000e630c400100000002c1ac0f1b52eb000000009aa70e618a0000000c6300000163404082799e120656137ee4176f75405cc5c3524c4ec1d7f3644ecfee5df5b655fb25ee0d029d821d1f2546630fde961fcb30dcaf9395c5aa0cecb2ecab102eeecc226831000000000000000980f6fb218f9e5536943ee5c136032e6e0f80000054038762265b2b493a1f4804775dfbb55b8e994258c34fc0bac02fa331b19a55"], 0x0, 0x0, 0x0})

[  405.496078] binder: 26271:26274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  405.503802] binder: 26271:26274 unknown command -1711276032
[  405.511238] binder: 26271:26274 ioctl c0306201 20000280 returned -22
[  405.525275] binder: 26271:26279 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  405.533294] binder: 26271:26279 unknown command -1711276032
[  405.541928] binder: 26271:26279 ioctl c0306201 20000280 returned -22
[  405.590375] device lo left promiscuous mode
[  405.598341] device lo entered promiscuous mode
07:03:00 executing program 2:
clone(0x80101fd, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:00 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(0x0, 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:03:00 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x4000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000040)='stack\x00'}, 0x30)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_matches\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={[], [], @empty}, 0x4e20, 0xfffffffffffffff7, 0x4e24, 0x3, 0xa, 0x80, 0x80, 0x3b, r3, r4}, {0x6, 0x3ff, 0x2, 0x1, 0x8, 0x5, 0x2, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6}, 0xfff, 0x6e6bbb, 0x1, 0x1, 0x3, 0x3}, {{@in=@multicast1, 0x4d2, 0x3c}, 0xa, @in6=@ipv4={[], [], @remote}, 0x0, 0x1, 0x0, 0x1000000000000, 0x9, 0x6, 0x92}}, 0xe8)
exit(0x0)
sendfile(r2, r2, 0x0, 0xad)
socket$nl_netfilter(0x10, 0x3, 0xc)

07:03:00 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)

07:03:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d6300000e630c402dd453a112e1f19b1018080a5acb67cfce5a74950000000c63000001634040"], 0x0, 0x0, 0x0})
getpid()

07:03:00 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(0x0, 0x220480, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:03:00 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)

07:03:00 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

[  405.902653] binder: 26289:26291 BC_REQUEST_DEATH_NOTIFICATION invalid ref -1588341715
[  405.925091] binder: 26289:26291 unknown command -815281318
07:03:00 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x30000, 0x0)
shutdown(r0, 0x1)
fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000140)='\x9c\x00', 0x2, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00')
mlockall(0x1)
exit(0x1)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000))
sendfile(r1, r1, 0x0, 0x3f3f)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'ersp\x06\x00\x00\x00\xff\x00', 0x400})
ioctl$UI_DEV_CREATE(r1, 0x5501)
tee(r1, r1, 0x6, 0xa)

[  405.961327] binder: 26289:26291 ioctl c0306201 20000280 returned -22
[  406.004279] binder: 26289:26291 BC_REQUEST_DEATH_NOTIFICATION invalid ref -1588341715
[  406.018422] binder: 26289:26291 unknown command -815281318
[  406.048601] binder: 26289:26291 ioctl c0306201 20000280 returned -22
07:03:01 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})

07:03:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d000000fffd620c6300000163404100000000000000001199ff92f8379062079c"], 0x0, 0x0, 0x0})
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080))
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000140)=0xa27, 0x4)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000100)={0x7, 0xffffffff7fffffff})

07:03:01 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:03:01 executing program 5:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:01 executing program 2:
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c)
fstatfs(r0, &(0x7f0000000080)=""/13)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:01 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0xffffffff)
sendfile(r0, r0, 0x0, 0xad)

07:03:01 executing program 5:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

[  406.340205] binder: 26322:26326 unknown command 13
[  406.368691] binder: 26322:26326 ioctl c0306201 20000280 returned -22
07:03:01 executing program 5:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:01 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

[  406.396125] binder: 26322:26326 unknown command 13
[  406.404907] binder: 26322:26326 ioctl c0306201 20000280 returned -22
07:03:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400001, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@ng={0x4, 0xd, "fa5f8df8ec3e3a3e97ba7d6c37"}, 0xf, 0x1)

07:03:01 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

[  406.479248] device lo left promiscuous mode
[  406.519156] binder: 26349:26356 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  406.538776] device lo entered promiscuous mode
[  406.547139] binder: 26349:26356 got reply transaction with no transaction stack
[  406.558284] binder: 26349:26356 transaction failed 29201/-71, size 0-0 line 2926
[  406.572689] binder: 26349:26360 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  406.581068] binder: 26349:26360 got reply transaction with no transaction stack
[  406.593794] binder: 26349:26360 transaction failed 29201/-71, size 0-0 line 2926
[  406.603158] binder: undelivered TRANSACTION_ERROR: 29201
[  406.610694] binder: undelivered TRANSACTION_ERROR: 29201
07:03:01 executing program 0:
clone(0xa060004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0xe)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000c0}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x11}, 0x20000010)

07:03:02 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})

07:03:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:02 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xad)

07:03:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d6323e40047b9fa7fc9b14600000000016340400000000000000000ee17f64dd77aa65751af72b0e299b27ee157670676fbdc113825ea9f3ea67244a568fb2ed40f9fd995eff496a7f0da024a35c9922b4053f9c0225806ecace3be81baf3916ce637246f46a1eff9d0275084167844b9af8951c8c5a470bd2db9c82da0f1927b6c2735d759b0"], 0x0, 0x0, 0x0})

[  407.175511] binder: 26368:26372 unknown command -467442899
[  407.188992] binder: 26368:26372 ioctl c0306201 20000280 returned -22
[  407.206424] binder: 26368:26381 unknown command -467442899
[  407.222402] binder: 26368:26381 ioctl c0306201 20000280 returned -22
07:03:02 executing program 2:
clone(0xa0000200, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000012c0)=0xe8)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000080)="4f0ac311f85e19fbfe54954116b0f7f55017b5cf81237c0e54f623e920117d01c10db62139932f135ae9", 0x2a, 0x4}, {&(0x7f00000000c0)="949a227e670f5428e94486157073e0c4ad16aadd92beb8e826f1b480e6", 0x1d, 0x7}], 0x10000, &(0x7f0000001300)={[{@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, 'mime_type[md5sum'}}, {@measure='measure'}, {@measure='measure'}, {@fowner_lt={'fowner<', r0}}, {@obj_user={'obj_user', 0x3d, '/posix_acl_accesskeyring'}}, {@pcr={'pcr', 0x3d, 0x2d}}]})
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/mls\x00', 0x0, 0x0)
fallocate(r1, 0x4, 0x401, 0x7ff)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r2 = fcntl$getown(0xffffffffffffff9c, 0x9)
ioprio_get$pid(0x1, r2)

07:03:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:02 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xad)

07:03:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/checkreqprot\x00', 0x400000, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_transmute(r3, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0)
connect(r0, &(0x7f0000000100)=@generic={0x3, "fef865589b4ff2a39a67abc8ca4c9710a84dcf7b1fcada26964a783c2d3708234098112ce76aefb1d058b9cd21806d2edb714322583bd4266d17e90164dee14664751ba0f5b05cecff38aea936446aee7995a378eb71f47d1d948bf209f67e808cbaca5429c689abe60a018928edc3696ccdcdd61fc9eb45060a82409cf5"}, 0x80)
write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9)
r4 = dup(r0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ba8a208f1af33b892f3e490c7cdbd409e4406fd8e8213dadbc4827bd74e7ebd729ccd0bd6a6072d15baa8508a1ec2c3ccfb5dda46a4f457191299422776ae6b8d278f37ee8bf7c90e7f7d014d4b6", @ANYRES16=r5, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:02 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xad)

07:03:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:02 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xad)

[  407.329320] device lo left promiscuous mode
[  407.329662] binder: 26388:26394 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  407.336440] device lo entered promiscuous mode
[  407.363643] binder: 26388:26394 got reply transaction with no transaction stack
[  407.411925] binder: 26388:26394 transaction failed 29201/-71, size 7310019992601231360-1684366433 line 2926
[  407.475507] binder: 26388:26419 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  407.483279] binder: 26388:26419 got reply transaction with no transaction stack
[  407.492504] binder: 26388:26419 transaction failed 29201/-71, size 7310019992601231360-1684366433 line 2926
[  407.508403] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
[  407.510687] binder: undelivered TRANSACTION_ERROR: 29201
[  407.537100] binder: undelivered TRANSACTION_ERROR: 29201
07:03:02 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
getpeername(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f00000000c0)=0x80)
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:03:02 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})

07:03:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:02 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xad)

07:03:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

[  408.067381] binder: 26438:26442 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  408.075668] binder: 26438:26442 got reply transaction with no transaction stack
[  408.084345] binder: 26438:26442 transaction failed 29201/-71, size 0-0 line 2926
[  408.093848] binder: 26438:26442 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  408.098658] binder: undelivered TRANSACTION_ERROR: 29201
[  408.101846] binder: 26438:26442 got reply transaction with no transaction stack
[  408.116120] binder: 26438:26442 transaction failed 29201/-71, size 0-0 line 2926
[  408.124855] binder: undelivered TRANSACTION_ERROR: 29201
[  408.161482] device lo left promiscuous mode
[  408.167099] device lo entered promiscuous mode
[  408.250138] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
07:03:03 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400480, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)=""/205, &(0x7f0000000180)=0xfffffd17)
r1 = getpid()
wait4(r1, &(0x7f0000000000), 0x0, 0x0)

07:03:03 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:03:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:03 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xad)

07:03:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x7, 0x80, 0x7ff})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c630000016340404307432b1bd67dd7a5db2e10edaa0eefbaf177a020bd8616b0fae7ac0a5326f8517cd34bcfdf1107135d5406b6c0ac122fe994d712c346e8bb4f54b8d92e759ff95714e904d3af0d1f5dcb2398716e176a2935161fc90339b8fa276ec9dc05663b466885f47ed694fa02ab2620d64e19dcf2b7760659e6f8ef964dbb510bd2d75eaa31011cdde9"], 0x0, 0x0, 0x0})

07:03:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:03 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0x0)

07:03:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180))
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

[  408.355155] binder: 26459:26463 ioctl 40305828 200000c0 returned -22
[  408.373784] binder: 26459:26463 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  408.407632] binder: 26459:26463 got reply transaction with no transaction stack
[  408.443430] binder: 26459:26463 transaction failed 29201/-71, size 509434314292952145-1345662276699708691 line 2926
[  408.489082] binder: 26459:26482 ioctl 40305828 200000c0 returned -22
[  408.497570] binder: undelivered TRANSACTION_ERROR: 29201
07:03:03 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0x0)

07:03:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
pipe(&(0x7f0000000040))

07:03:03 executing program 0:
clone(0x112023fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x18)
write$selinux_access(r0, &(0x7f0000000100)={'system_u:object_r:devtty_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x4135}, 0x61)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00')
exit(0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10)
sendfile(r1, r1, 0x0, 0xad)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10)

07:03:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180))
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:03 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c)
getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000000c0)=""/196, &(0x7f00000001c0)=0xc4)
ioctl$TIOCCONS(r0, 0x541d)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="57ed3fb94b7a25d2f73f248f1f92089050ed0fddf5d466ec75d0d5cae039badf14e6512f61a3616b2962114b63ead5"], 0x0, 0x0, 0x0})

07:03:03 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x14080, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x106c0000, 0xfffffffffffffffd, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:03 executing program 4:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
exit(0x0)
sendfile(r0, r0, 0x0, 0x0)

07:03:03 executing program 4:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$selinux_context(r0, &(0x7f0000000180)='system_u:object_r:crontab_exec_t:s0\x00', 0xffffffffffffff0b)
clone(0x10000007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x102, 0x1, 0x0, 0x0, 0x1}, 0xfffffffffffffee1)

[  408.899692] binder: 26493:26496 unknown command -1186992809
[  408.916493] binder: 26493:26496 ioctl c0306201 20000280 returned -22
07:03:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180))
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000066b93f085e799ee243c6cb9d8e3bacae39a25d3097c2373244ed75107e30cb78eba34ffe4488c8f04945ba8bfb8155078d31551a319abaf81d0d54da300e2f"], 0x0, 0x0, 0x0})

07:03:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  408.941553] binder: 26493:26496 unknown command -1186992809
[  408.948198] binder: 26493:26496 ioctl c0306201 20000280 returned -22
07:03:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

[  409.025805] device lo left promiscuous mode
[  409.039388] binder: 26517:26525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  409.047362] binder_alloc: binder_alloc_mmap_handler: 26520 20001000-20004000 already mapped failed -16
[  409.060254] binder: 26517:26525 unknown command 2036205631
[  409.063122] binder: BINDER_SET_CONTEXT_MGR already set
[  409.072049] binder_alloc: 26520: binder_alloc_buf, no vma
[  409.073402] binder: 26517:26525 ioctl c0306201 20000280 returned -22
[  409.077773] binder: 26520:26523 ioctl 40046207 0 returned -16
[  409.092588] binder: 26520:26526 transaction failed 29189/-3, size 0-0 line 3155
[  409.098887] binder: 26517:26525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  409.107863] binder: 26517:26525 unknown command 2036205631
[  409.113581] binder: 26517:26525 ioctl c0306201 20000280 returned -22
[  409.135308] binder: undelivered TRANSACTION_ERROR: 29189
[  409.141455] binder: send failed reply for transaction 515 to 26520:26523
[  409.148531] binder: undelivered TRANSACTION_COMPLETE
[  409.154010] binder: undelivered TRANSACTION_ERROR: 29189
07:03:04 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
pipe(&(0x7f0000000040))

07:03:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:04 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
fcntl$dupfd(r0, 0x0, r0)
write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffff5a7d, 0x2, 0x4, 0x8, 0x4, 0x2, 0x3e, 0x0, 0xa, 0x38, 0x15, 0x0, 0x9d, 0x20, 0x2, 0xfa00000000000000, 0x6, 0xf4}, [{0x6, 0x1, 0x3ff, 0x7, 0xd035, 0x8, 0x6, 0x1}, {0x6474e557, 0x5, 0x3, 0x7ff, 0x3, 0x3, 0x10, 0x9}], "fc04e644625f5f8f1d7ba103cf5956875eefbfaf06ca0a61ffa45b403fd776786c534a6e4f43d79ae4746ee4793dcc7cf640949d66d1d3819eb7a55aa750922cef0867bc6e660ef62a8d32ab9a12914cb79da7281f7f282a2c41665a85b6f30c99ab8d048b8679fd0850b7865e46fc0e03dbaa3ba0fb79d6c554867983cadf3a37c9a81c9e8c213f7a5ffaeb1e4b3d153e6d41052c6a1a1f7adff0c463a749de428fb50fc95b45366906befcd068183a75fe9acbcd7379802d558c1129e8ae0a4a71af6c5d55d7e70c85dcc77a4e9ae0195bf523ce47b4850fa9667d599507a38599df0a59562bca5f8550f09fefcbd241a1", [[], [], [], [], [], [], []]}, 0x86a)
exit(0x0)
sendfile(r0, r0, 0x0, 0xa9)

07:03:04 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000080)='t\x00\x8c\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88ddd0100314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfc4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"})

07:03:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000180)=0x5f05)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x10c)
getdents64(r3, &(0x7f00000000c0)=""/122, 0x7a)

[  409.781634] binder: 26544:26550 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  409.788857] binder: 26544:26550 got reply transaction with no transaction stack
[  409.796868] binder: 26544:26550 transaction failed 29201/-71, size 0-0 line 2926
[  409.808984] binder: 26544:26553 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  409.810090] binder: undelivered TRANSACTION_ERROR: 29201
[  409.816624] binder: 26544:26553 got reply transaction with no transaction stack
[  409.829489] binder: 26544:26553 transaction failed 29201/-71, size 0-0 line 2926
[  409.837592] binder: undelivered TRANSACTION_ERROR: 29201
07:03:04 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

07:03:04 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0x8)

07:03:04 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setresuid(r1, 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

07:03:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="080200")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x37, &(0x7f0000000100)=0x80, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d6300000e500c400100000002000000000000000c63eaff0063404055c6f95fb476b84a947581360718919ef93c64c8d81d1faa7ddf3e51c721e84c16c1ac9ab21bc4cea121d2ac79ffcd6226319930c5d929822b67e29ccd71252b5129ffd67cfa0232889a2839d86aed54a454fa396220ebfe1d620902547b661e194e"], 0x0, 0x0, 0x0})
ioctl(r0, 0xffffffff, &(0x7f0000000080)="2c661f269038f3330229ec56cb073b73d59aeceb7badbf5ddc140c2bd5fbb51fa136aadf30489b3be440e8eaf64f1535ac46ab993bf96ca098927c6fc3ad934d037dc87b60a5b698f8bd197de59f5778f22c12f17971f0e9a5158004dd2aefa0d9d966e411ca842c87650179d1ad7c8ef61a7bdd4dae")

07:03:04 executing program 4:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x0, 0x568f, 0x0, 0x5, 0x6, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5})
clock_gettime(0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r1, 0x0)

07:03:04 executing program 0:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000040))
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

[  409.968683] binder: 26564:26570 unknown command 1074548750
[  409.976095] binder: 26564:26570 ioctl c0306201 20000280 returned -22
07:03:05 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
pipe(&(0x7f0000000040))

07:03:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)

07:03:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)

07:03:05 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x6, 0x0)
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001400))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001440)='em1\x00'}, 0x30)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001580))
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000015c0)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000001540)='net/nfsfs\x00')
exit(0x5)
sendfile(r2, r2, 0x0, 0xad)

07:03:05 executing program 4:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x0, 0x568f, 0x0, 0x5, 0x6, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5})
clock_gettime(0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r1, 0x0)

[  410.590641] binder: 26603:26613 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  410.610350] binder: 26603:26613 got reply transaction with no transaction stack
[  410.618486] binder: 26603:26613 transaction failed 29201/-71, size 0-0 line 2926
[  410.637459] binder: 26603:26613 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  410.647266] binder: 26603:26613 got reply transaction with no transaction stack
[  410.660730] binder: 26603:26613 transaction failed 29201/-71, size 0-0 line 2926
[  410.670546] binder: undelivered TRANSACTION_ERROR: 29201
[  410.676325] binder: undelivered TRANSACTION_ERROR: 29201
07:03:05 executing program 2:
clone(0x2000, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x20003ff)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8)
ustat(0x8, &(0x7f0000000000))
r2 = getgid()
ioctl$RTC_AIE_ON(r0, 0x7001)
fchown(r0, r1, r2)

07:03:05 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000700)=0x40)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000040)="60a3700a", 0x4}, {&(0x7f00000001c0)="babb43ae05b0a66e9be7f2700ce7fd0b5cac75bab66eed3f7576c389f3b75e2d10f40af113b1e1412fe10dcef80b8faebe11cb3ac49764139871e08889e84abb0ec0ffe66787a00ea706551b218acdaa7e8ad3db9f213878ea51d4", 0x5b}, {&(0x7f0000000240)="aaeb0036dcd1898abf8ded7e2d55a6032f57a4a4335a64e328c84037717da8164e173c74811ec059bb0d075278c4521745c4959596908ac2bb129c2ab91f07027302574dd02ee86e84ee4080b4a62dbefbf59b819d9e92619ee0a11bbfea37a7d532f2edca6fd9aebc7e4118ffdd6b95a40266ede53cea8935c37d104736cd557e9b41f3694f014c69124830eaaf79f7f584dfbe921c5ec41def82aecd4a", 0x9e}, {&(0x7f0000000300)="fcc1c3976d0e76f2a2f7f559fd3bbf9201bddac61cebe1cac61dcf000e19c314e55b9c911719d3c8894f66ffc34e47dbc3dfa2e38d1cc41ca8ea653841415ed96319c2fa0bf15e907a455a0ef51a0dbcf979e1ff353e3b426fa522ef6ed178616a", 0x61}, {&(0x7f0000000380)="e834d7f329a2943a32690be43f70a15aeec3ffe85ff93e0970a7a939ce270324c4f100f486be98e872affa61c2fee00669cf96fc89e9e2d110fd480c456d162a5bd2aedee9a2038a31444ffd0f2df4962be99bf1dbc23edb320d1944f675d347b3204744f764aef3bca78c55e7873b4a124f06df75a32fd580b1a42447d783aee151cdaec0b57e99596fa5b4dd51f401cbf588e3d9b8d5b5fa4ad3d01ef177dadddeb298f44e1762998fcd6e98d9f8bfa79e56d3b6dd6e8f6ef59395f39680f5bc1374fb", 0xc4}, {&(0x7f0000000480)="441f572c9460478acd3a1c20390168f00d978d6fe0369098f3cfe1af8dc1e590365c43273d2765db52f47590a694dbe8ca1968026877b4bc8f05", 0x3a}, {&(0x7f00000004c0)="de579792fc55ce83bd17ec8c7a572216689f651e2ee9c739f4337a936d9fa4411841070c027c3757f8e0f23ee85b55148df79f20725bf9b67083fdc66df070a5a38f3ffef29acaf38bd041f2ca7c0b27c93b766494cfee3afd4609c51fb5a928de59ef9381363d71e89ba92dac96490f852ed52b9cd3f5a3925b09590b6b0b13e6c71cf42897f668b9dc6d1438a30ddf4beb6f9ea05ce2a80c2b2122ea397977245a6c7be2b846c86ca0", 0xaa}], 0x7)
sendfile(r1, r1, 0x0, 0xaa)
prctl$PR_CAPBSET_DROP(0x18, 0x19)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0x8, 0x3f, 0xce, &(0x7f00000000c0)="967ae918b557d69dcc5339155837d2f029a9e95d0701459484a12311f2765da06c518b425102359ecf5e7f90979c115df657b10031514a73e6a391e7b1d5a2cddcdb7f9739f5f500a98194c442231c2e8f675f772448fa9b2a9c495bbbb28256d3fd5a7d67ec85fb8037c61581b4e358830cd8fdbc54ae1255485c48df2d30b825edbc81d3388fa2d51dc0fc14e2248bf201891139d85f5fb5b20e61a5879670a58d84109b59d9296c971b4ac254d4d75f94b4cc447b6236dc37fc0f30485cc33a779914f757d66094c21af6f788"})
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000740))
lsetxattr$security_ima(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.ima\x00', &(0x7f0000000680)=@md5={0x1, "6899555bd514cfdd4cfa039995fbe17b"}, 0x11, 0x1)

07:03:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)

07:03:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x0)
sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:05 executing program 4:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x0, 0x568f, 0x0, 0x5, 0x6, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5})
clock_gettime(0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r1, 0x0)

07:03:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)

07:03:05 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, 0x0, 0xfffffe7d)

[  411.122567] binder: 26630:26632 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  411.131401] binder: 26630:26632 got reply transaction with no transaction stack
[  411.152580] binder: 26630:26632 transaction failed 29201/-71, size 0-0 line 2926
[  411.183567] binder: 26630:26643 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  411.191553] binder: undelivered TRANSACTION_ERROR: 29201
[  411.196701] binder: 26630:26643 got reply transaction with no transaction stack
[  411.205762] binder: 26630:26643 transaction failed 29201/-71, size 0-0 line 2926
[  411.214301] binder: undelivered TRANSACTION_ERROR: 29201
07:03:06 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:06 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000400))
creat(&(0x7f0000000380)='./file0\x00', 0x2)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'team_slave_0\x00', {0x2, 0x4e24, @remote}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={<r2=>0x0}, &(0x7f0000000280)=0xc)
r3 = syz_open_procfs(r2, &(0x7f00000002c0)='stack\x00')
exit(0x0)
sendfile(r3, r3, 0x0, 0xad)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r4, @ANYBLOB="000028bd7000ffdbdf250a0000007c0004000c00010073797a310000000014000700080003004000000008000300000800001400010062726f6164636173742d6c696e6b00004400070008000300530f00000800040001800000080004000000000008000400ffffffff0800020008000000080003000900000008000200f8ffffff08000200d66b00003c0004001c00070008000100030000000800010022000000080004000900000014000700080002000600000008000100140000000800030004000000"], 0xcc}}, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x4, 0x4)

07:03:06 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00')
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1, 0x0)

07:03:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xc9, 0x1, 0xf760, "89954a744c6bb735301470e5c65e0bc3", "c656ea32bb2fbad9f7ae56cb959730906ba6b914f2b3d2ef2592414c377770d6a137faf446645e61eb5825932346ea039bf693c19e06d9c43d2c1b4a64ae17b350e7476155662bd2b895e3ab43bad736afcafb3dc5ccd22aac6b65bebb6be6dc25812c84883487a3ccc2f4d188fba87e84086952ac539c4f6ba4d3f097401ea8adf4cd4d5db7ed10593ec00812283388d81182974fec38aaea2e7115e9f70511e1c97f872ede5eb0213acf8508e5a3beec64eb80"}, 0xc9, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x23d, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:06 executing program 4:

[  411.397223] 
[  411.398906] ======================================================
[  411.405215] WARNING: possible circular locking dependency detected
[  411.411530] 4.14.107+ #33 Not tainted
[  411.411984] binder: 26659:26663 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  411.415322] ------------------------------------------------------
[  411.415328] syz-executor.5/26662 is trying to acquire lock:
[  411.415331]  (&p->lock){+.+.}, at: [<ffffffff8cbce40d>] seq_read+0xcd/0x1180
[  411.415360] 
[  411.415360] but task is already holding lock:
[  411.422748] binder: 26659:26663 got reply transaction with no transaction stack
[  411.428765]  (&pipe->mutex/1){+.+.}, at: [<ffffffff8cb707d8>] pipe_lock+0x58/0x70
[  411.428788] 
[  411.428788] which lock already depends on the new lock.
[  411.428788] 
[  411.428790] 
[  411.428790] the existing dependency chain (in reverse order) is:
[  411.428793] 
[  411.428793] -> #2 (&pipe->mutex/1){+.+.}:
[  411.428803] 
[  411.428803] -> #1 (
[  411.435050] binder: 26659:26663 transaction failed 29201/-71, size 0-0 line 2926
[  411.441717] &sig->cred_guard_mutex){+.+.}:
[  411.441725] 
[  411.441725] -> #0 (&p->lock){+.+.}:
[  411.441734] 
[  411.441734] other info that might help us debug this:
[  411.441734] 
[  411.441736] Chain exists of:
[  411.441736]   &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1
[  411.441736] 
[  411.441750]  Possible unsafe locking scenario:
[  411.441750] 
[  411.441752]        CPU0                    CPU1
[  411.441754]        ----                    ----
[  411.441755]   lock(&pipe->mutex/1);
[  411.441761]                                lock(&sig->cred_guard_mutex);
[  411.441775]                                lock(
[  411.451635] binder: 26659:26671 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  411.455169] &pipe->mutex/1);
[  411.455175]   lock(&p->lock);
[  411.455181] 
[  411.455181]  *** DEADLOCK ***
[  411.455181] 
[  411.455187] 1 lock held by syz-executor.5/26662:
[  411.455189]  #0:  (&pipe->mutex/1){+.+.}, at: [<ffffffff8cb707d8>] pipe_lock+0x58/0x70
[  411.467850] binder: 26659:26671 got reply transaction with no transaction stack
[  411.471141] 
[  411.471141] stack backtrace:
[  411.471151] CPU: 1 PID: 26662 Comm: syz-executor.5 Not tainted 4.14.107+ #33
[  411.471154] Call Trace:
[  411.471168]  dump_stack+0xb9/0x10e
[  411.471182]  print_circular_bug.isra.0.cold+0x2dc/0x425
[  411.471201]  ? __lock_acquire+0x2d83/0x3fa0
[  411.493528] binder: 26659:26671 transaction failed 29201/-71, size 0-0 line 2926
[  411.495669]  ? trace_hardirqs_on+0x10/0x10
[  411.495679]  ? _raw_spin_unlock_irq+0x24/0x50
[  411.495691]  ? _raw_spin_unlock_irq+0x35/0x50
[  411.500363] device lo entered promiscuous mode
[  411.505064]  ? finish_task_switch+0x1e2/0x620
[  411.505073]  ? finish_task_switch+0x1b7/0x620
[  411.505093]  ? __switch_to_asm+0x34/0x70
[  411.515628] binder: undelivered TRANSACTION_ERROR: 29201
[  411.525606]  ? __switch_to_asm+0x40/0x70
[  411.525620]  ? __lock_acquire+0x56a/0x3fa0
[  411.525628]  ? deref_stack_reg+0xaa/0xe0
[  411.525637]  ? lock_acquire+0x10f/0x380
[  411.525653]  ? seq_read+0xcd/0x1180
[  411.543907] binder: undelivered TRANSACTION_ERROR: 29201
[  411.544636]  ? seq_read+0xcd/0x1180
[  411.544645]  ? __mutex_lock+0xf7/0x1430
[  411.544656]  ? seq_read+0xcd/0x1180
[  411.703828]  ? seq_read+0xcd/0x1180
[  411.707441]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[  411.712894]  ? perf_trace_lock+0x11e/0x4e0
[  411.717130]  ? mark_held_locks+0xa6/0xf0
[  411.721197]  ? get_page_from_freelist+0x85e/0x1d60
[  411.726112]  ? kasan_unpoison_shadow+0x30/0x40
[  411.730672]  ? get_page_from_freelist+0x110d/0x1d60
[  411.735669]  ? seq_read+0xcd/0x1180
[  411.739297]  ? seq_read+0xcd/0x1180
[  411.742915]  ? __fsnotify_inode_delete+0x20/0x20
[  411.747680]  ? seq_lseek+0x3d0/0x3d0
[  411.751376]  ? __inode_security_revalidate+0xcf/0x120
[  411.756543]  ? avc_policy_seqno+0x5/0x10
[  411.760584]  ? seq_lseek+0x3d0/0x3d0
[  411.764286]  ? proc_reg_read+0xf5/0x160
[  411.768240]  ? do_iter_read+0x3e8/0x5b0
[  411.772194]  ? vfs_readv+0xe6/0x150
[  411.775806]  ? compat_rw_copy_check_uvector+0x300/0x300
[  411.781162]  ? iov_iter_get_pages_alloc+0x2ca/0xe70
[  411.786163]  ? iov_iter_get_pages+0xca0/0xca0
[  411.790642]  ? default_file_splice_read+0x48a/0x860
[  411.795639]  ? drop_futex_key_refs.isra.0+0x17/0xa0
[  411.800632]  ? futex_wake+0x14b/0x430
[  411.804430]  ? do_splice_direct+0x240/0x240
[  411.808742]  ? __lock_acquire+0x56a/0x3fa0
[  411.813046]  ? __fsnotify_inode_delete+0x20/0x20
[  411.817781]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  411.824432]  ? __inode_security_revalidate+0xcf/0x120
[  411.829603]  ? avc_policy_seqno+0x5/0x10
[  411.833645]  ? security_file_permission+0x88/0x1e0
[  411.838567]  ? do_splice_direct+0x240/0x240
[  411.842868]  ? do_splice_to+0xfd/0x150
[  411.846742]  ? SyS_splice+0xf6e/0x12d0
[  411.850618]  ? compat_SyS_vmsplice+0x150/0x150
[  411.855195]  ? do_clock_gettime+0xd0/0xd0
[  411.859328]  ? do_syscall_64+0x43/0x4b0
[  411.863564]  ? compat_SyS_vmsplice+0x150/0x150
[  411.868136]  ? do_syscall_64+0x19b/0x4b0
[  411.872189]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
07:03:06 executing program 2:
clone(0x400, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
wait4(r0, &(0x7f00000004c0), 0x80000002, 0x0)
r1 = getpgrp(0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
syz_open_procfs(r1, &(0x7f0000000240)='net/ipv6_route\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x7000000000000000, 0x8, 0x0, 0x5, 0x86, 0xffffffffffffffff}, @exit, @jmp={0x5, 0x729687ba, 0x7, 0x7, 0x7, 0xfffffffffffffffe, 0x4}, @generic={0x6, 0x1, 0xcaf5, 0xe3}]}, &(0x7f00000002c0)='syzkaller\x00', 0xd691, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0x3}, 0x48)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/access\x00', 0x2, 0x0)
accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup2(r3, r4)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e21, 0xc000000000000, @rand_addr="e5d2b7584e273ab8d2804dee6f782eeb", 0x158}, 0x1c)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={[], 0x8001, 0x0, 0x5, 0x1, 0x69d, r1})
wait4(r1, &(0x7f0000000000), 0x80000000, &(0x7f0000000040))

07:03:06 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0xfffffffffefffffd)
sendfile(r0, r0, 0x0, 0xad)

07:03:06 executing program 4:

07:03:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d63000011630c000000000000000000000000000c630700016340400b317f135da2cb72f6d2488508fa110632f37fc5ca409f6ccf73ba2fac07176c7813536b1c985cc0368f9ed596d329e946cf44a8a2f753365f29b0b9864acc166a023edc7e4d382a335f2fe0ddc646d5d7ee7f1a57e3407e6f1ef3b864b03677ca4a6df22c71e6f3ef815ab7d2829a2254f4f0a71b50151d54d61fc661756e4e"], 0x0, 0x0, 0x0})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101980, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x98, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x20, 0x18, &(0x7f00000000c0)=[@fda={0x66646185, 0x5, 0x4, 0x1a}], &(0x7f0000000100)=[0x78, 0x18, 0x78]}, 0x4}}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000180)=[@ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x3, 0x8}], &(0x7f00000001c0)=[0x70, 0x28, 0x0]}}, @increfs={0x40046304, 0x2}], 0x3e, 0x0, &(0x7f0000000200)="8d6a385acdb99deaac1a7b531a47b7a096413b2005e85ec482b9b77986eafaa4bdd9ac399df74f84d67e366c7746a017e7d63f84cf5677e6b8e4bdde6dad"})
ioctl$TIOCCBRK(r2, 0x5428)

07:03:06 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00')
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1, 0x0)

07:03:06 executing program 4:

07:03:06 executing program 5:

[  412.054021] binder: 26682:26690 unknown command 811793
[  412.063816] binder: 26682:26690 ioctl c0306201 20000280 returned -22
[  412.082470] binder: 26682:26690 got reply transaction with no transaction stack
[  412.091025] binder: 26682:26690 transaction failed 29201/-71, size 32-24 line 2926
[  412.109229] binder: 26682:26690 unknown command 811793
[  412.114966] binder: 26682:26698 got reply transaction with no transaction stack
[  412.122383] binder: undelivered TRANSACTION_ERROR: 29201
[  412.122918] binder: 26682:26690 ioctl c0306201 20000280 returned -22
[  412.135247] binder: 26682:26698 transaction failed 29201/-71, size 32-24 line 2926
[  412.143729] binder: undelivered TRANSACTION_ERROR: 29201
07:03:07 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:07 executing program 5:

07:03:07 executing program 4:

07:03:07 executing program 0:
clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x4000, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
timerfd_settime(r0, 0x1, &(0x7f0000000140)={{r1, r2+30000000}}, &(0x7f0000000180))
getpeername$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c)
exit(0x0)
sendfile(r0, r0, 0x0, 0xa)

07:03:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
fcntl$notify(r0, 0x402, 0x8000000a)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000680)=ANY=[], 0xffffffffffffff12, 0x0, 0x0})
pipe2(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000440)={0xfde2, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e20, @local}}]}, 0x210)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x108, r4, 0xb00, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x94}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x601f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000080)={0x2, 0xdc1})
write$selinux_user(r3, &(0x7f0000000200)={'system_u:object_r:ldconfig_cache_t:s0', 0x20, 'system_u\x00'}, 0x2f)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x4b4, 0x0, 0x7, 0xff, 0x5}, 0xc)

07:03:07 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)

07:03:07 executing program 5:

07:03:07 executing program 4:

[  412.240493] binder: 26708:26717 unknown command 0
07:03:07 executing program 5:

07:03:07 executing program 4:

07:03:07 executing program 5:

07:03:07 executing program 4:

[  412.265436] binder: 26708:26717 ioctl c0306201 20000280 returned -22
[  412.316225] binder: 26708:26734 unknown command 0
[  412.321430] binder: 26708:26734 ioctl c0306201 20000280 returned -22
07:03:07 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:07 executing program 5:

07:03:07 executing program 4:

07:03:07 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
fsync(r1)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74040000000000080000000000000000000000000000000000980400004001a447b4241070f2c60000b00300c7320df323c78959eeb644f56aed7cf4a14ed604e7797cf6bed33e78967992d1a2e998f6c1f2cd8ea141e873b528d8aaa8a24b56b3ce559be881aa23fed6f6d8d74e00a1bfd025128931e146d105d297558b41654f9325bb15ef38c1576d9c09031f7e8958afe532c12a3e78347bb43637a088f8c6e29e08f1eef85bc6036d610a28b883f2c187914f08c6d494241bdcd493571ae22f", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000a43ba039cf630000000000000000000000000000000000000000000000000000ac1414bbe0000002040000000000000000000000ffffffff000000ffffffff00aaaaaaaaaa17000000000000000000000000000000000000ff000000ff0000000000000000000000ffffffffffff00000000000000000000000000000000000000ffff0000ff00000000000000000000000200050764000700050006767863616e31000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00030010000000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a310000000000000000000000001cff000000000000b20e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4e8)
exit(0x0)
getsockopt$netlink(r1, 0x10e, 0xd, &(0x7f00000000c0)=""/153, &(0x7f0000000040)=0x99)
sendfile(r1, r1, 0x0, 0xad)

07:03:07 executing program 2:
prctl$PR_GET_FP_MODE(0x2e)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0xc9, &(0x7f0000000040)="c90d3ceee4241a4399833e359ecfea6a30dbe45717421e6fa7453c81fc83d260b79fee627f7cd1f4bcef53836745e66bf7636d085a1945064833298a0effc26e13b0821d3cacf75161426d2d37737fead8d6078344a56bdd7189abcacdf0b317889b40812d5df4eeb7c0b1f581f5920940b115bbf60b26155fb663d257648cb55a15f8d5f3c1fc0beb85827da424e34836461a529cfa786ee289790908d1d78b89c9db90f5976a94d0e00c39520a2e86fc1332b7ab18e1192acfc80c61e3ce57d6600ace44346e72fc"})
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r1 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80)
inotify_rm_watch(r0, r1)

07:03:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0))
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000200)=""/123)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040507219077764844eedb1cdac77737409247c618a229c2ab0207ccdb186456da757b00d5db28ca5ae26cd9601000000658ec03668c53b1cba49f3e4629b11f14b31d09fdeb7245f831df2689e5767d91ad2a7b6f294b86ccb601c32ed32f57e80470f54051e8beebb44dee9f6aa348022309534c2934d3a91797549ccfce5880a4021be7e73b55439ae2815d8e72b886dcd7e4f15afbc72eeb2ee4efffe89243673fa1378"], 0x0, 0x0, 0x0})

07:03:07 executing program 5:

07:03:07 executing program 4:

07:03:07 executing program 4:

07:03:08 executing program 5:

07:03:08 executing program 4:

07:03:08 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KDADDIO(r1, 0x4b34, 0x1)
accept4(r0, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000005ac0)='/selinux/checkreqprot\x00', 0x8a00, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000005b00)=0x3, 0x4)
sendfile(r2, r2, 0x0, 0xad)

[  413.113629] binder: 26751:26756 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  413.123208] binder: 26751:26756 got reply transaction with no transaction stack
[  413.139272] binder: 26751:26756 transaction failed 29201/-71, size -5862124642259586985-7277816997857381670 line 2926
[  413.179560] binder: 26751:26756 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  413.190643] binder: undelivered TRANSACTION_ERROR: 29201
[  413.197604] binder: 26751:26756 got reply transaction with no transaction stack
[  413.214466] binder: 26751:26756 transaction failed 29201/-71, size -5862124642259586985-7277816997857381670 line 2926
[  413.228267] binder: undelivered TRANSACTION_ERROR: 29201
07:03:08 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:08 executing program 5:

07:03:08 executing program 4:

07:03:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0xfd})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000008c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

[  413.891787] binder: 26786:26789 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  413.899728] binder: 26786:26789 got reply transaction with no transaction stack
[  413.908053] binder: 26786:26789 transaction failed 29201/-71, size 0-0 line 2926
[  413.918791] binder: 26786:26789 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  413.919537] binder: undelivered TRANSACTION_ERROR: 29201
[  413.926136] binder: 26786:26789 got reply transaction with no transaction stack
[  413.939538] binder: 26786:26789 transaction failed 29201/-71, size 0-0 line 2926
[  413.948386] binder: undelivered TRANSACTION_ERROR: 29201
[  413.959180] device lo left promiscuous mode
[  413.967945] device lo entered promiscuous mode
07:03:09 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, &(0x7f0000000040), 0x8, 0x0)

07:03:09 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpgid(0x0)
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='attr/prev\x00')
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/176)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x5)
sendfile(r2, r2, 0x0, 0xad)

07:03:09 executing program 4:

07:03:09 executing program 5:

07:03:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x104)
write$P9_RREADDIR(r1, &(0x7f0000000100)={0x2a, 0x29, 0x1, {0x7, [{{0xc, 0x4, 0x8}, 0x1, 0x80000001, 0x7, './file0'}]}}, 0x2a)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = dup(r2)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x8001, 0x100000001, 0x2, 0x9, 0x10, 0x14, 0x3, 0x3, 0x1, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:09 executing program 4:

07:03:09 executing program 4:

07:03:09 executing program 5:

[  414.132751] binder: 26802:26803 ioctl 5404 20000080 returned -22
[  414.139372] binder: 26802:26803 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  414.165533] binder: 26802:26803 got reply transaction with no transaction stack
[  414.178472] binder: 26802:26803 transaction failed 29201/-71, size 0-0 line 2926
[  414.193617] binder: 26802:26803 ioctl 5404 20000080 returned -22
[  414.199915] binder: 26802:26818 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  414.208068] binder: 26802:26818 got reply transaction with no transaction stack
[  414.215671] binder: 26802:26818 transaction failed 29201/-71, size 0-0 line 2926
[  414.223951] binder: undelivered TRANSACTION_ERROR: 29201
[  414.229462] binder: undelivered TRANSACTION_ERROR: 29201
07:03:09 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:09 executing program 5:

07:03:09 executing program 4:

07:03:09 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x8, 0x6, 0x6})
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:03:09 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3d8, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23d143d3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd74}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9bc4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7e2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1df}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x716e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x128, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @remote, 0x8000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf396}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x401, @empty, 0xaa}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsh0\x00'}}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000f40)="0adc3e963c123f3188b07030cce18e2cfab813517586385266c9333ccc5f1fea58c73515c46661497187c2c1d0ea422622eccb9fe7cff726bb4a475f0004be53bfd51e403db1073fbc6c831baaac156170c52fcf20fd026778d74e9900b766c01eecfda3bfd3cb")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000002000e00000000000c63000001634040"], 0x0, 0x0, 0x0})
sendfile(r0, r1, &(0x7f0000000080), 0x898)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x20000, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000180)={@local, <r4=>0x0}, &(0x7f00000001c0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}}}, &(0x7f0000000240)=0xe8)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000cc0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'bcsh0\x00', <r9=>0x0})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000ec0)={@mcast2, <r10=>0x0}, &(0x7f0000000f00)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000001b40)=0xe8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001cc0)={<r12=>0x0, @multicast1, @multicast1}, &(0x7f0000001d00)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001d40)={'lo\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003880)={'veth1_to_bridge\x00', <r14=>0x0})
getpeername$packet(0xffffffffffffff9c, &(0x7f0000003980)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000039c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003a00)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000003b00)=0xe8)
recvmsg(r0, &(0x7f00000051c0)={&(0x7f0000003cc0)=@can={0x1d, <r17=>0x0}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003d40)=""/4, 0x4}, {&(0x7f0000003d80)=""/43, 0x2b}, {&(0x7f0000003dc0)=""/82, 0x52}, {&(0x7f0000003e40)=""/94, 0x5e}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/46, 0x2e}, {&(0x7f0000004f00)=""/171, 0xab}, {&(0x7f0000004fc0)=""/238, 0xee}], 0x8, &(0x7f0000005140)=""/94, 0x5e}, 0x10002)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005200)={'team0\x00', <r18=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000005280)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000052c0)={'veth1_to_team\x00', <r20=>0x0})
accept4$packet(0xffffffffffffffff, &(0x7f0000005300)={0x11, 0x0, <r21=>0x0}, &(0x7f0000005340)=0x14, 0x800)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005440)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in6=@empty}}}, &(0x7f0000005540)=0xe8)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000005580)={@remote, @multicast2, <r23=>0x0}, &(0x7f00000055c0)=0xc)
accept4$packet(0xffffffffffffff9c, &(0x7f000000a3c0)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000a400)=0x14, 0x80000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a4c0)={'lapb0\x00', <r25=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f000000acc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88008}, 0xc, &(0x7f000000ac80)={&(0x7f000000a500)={0x768, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x164, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xb18}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x170, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff0001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xed3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r22}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x45b}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xa7c}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x138, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x8b, 0x568, 0x64, 0x3}, {0x401, 0x4, 0x9, 0x80000000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r25}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x20040000}, 0x8005)
write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x7ff, 0x0, 0x63, 0x8000, 0x7, 0x0, 0x0, 0x68, 0x39f, 0x40, 0x342, 0x4, 0x65a, 0x38, 0x2, 0x7, 0xb8f3753, 0x100000000}, [{0x1, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x100000000, 0xcf0}, {0x4, 0x686, 0x7, 0x6, 0x4, 0x3ff, 0x6, 0x1}], "4264d7e0e4ecee9a596ba5defb36af", [[], [], [], [], [], [], []]}, 0x7bf)

07:03:09 executing program 5:

07:03:09 executing program 4:

07:03:09 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

07:03:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

07:03:09 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}})
sendfile(r0, r0, 0x0, 0xad)

[  414.710709] binder: 26825:26827 unknown command 234881536
[  414.727031] binder: 26825:26827 ioctl c0306201 20000280 returned -22
07:03:09 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

[  414.767634] device lo left promiscuous mode
[  414.806108] device lo entered promiscuous mode
07:03:10 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:10 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:10 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

07:03:10 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$KDSETLED(r0, 0x4b32, 0xb1)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

[  415.505236] binder: 26825:26877 unknown command 234881536
[  415.514761] binder: 26825:26877 ioctl c0306201 20000280 returned -22
07:03:10 executing program 2:
clone(0x65048000, 0x0, 0x0, 0x0, 0x0)
time(&(0x7f0000000000))
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000001c0)=0x5)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x81)
futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}})
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080))

07:03:10 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:10 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

07:03:10 executing program 3:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:10 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x3, 0x3})
sendfile(r0, r0, 0x0, 0xad)

07:03:10 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:10 executing program 4:
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)

[  415.595133] device lo left promiscuous mode
[  415.602937] device lo entered promiscuous mode
[  415.635063] binder: 26912:26918 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:03:10 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

[  415.671629] binder: 26912:26918 got reply transaction with no transaction stack
[  415.683175] binder: 26912:26918 transaction failed 29201/-71, size 0-0 line 2926
[  415.702450] binder: undelivered TRANSACTION_ERROR: 29201
07:03:11 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x85}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x236f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040)

07:03:11 executing program 4:
syz_open_dev$loop(0x0, 0x4, 0x0)

07:03:11 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')

07:03:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100634040"], 0x0, 0x0, 0x0})

07:03:11 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:11 executing program 2:
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x3)
creat(&(0x7f0000000080)='./file0\x00', 0x5)
getcwd(&(0x7f0000000240)=""/111, 0xfffffffffffffe4f)

07:03:11 executing program 4:
syz_open_dev$loop(0x0, 0x4, 0x0)

07:03:11 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')

[  416.358007] binder: 26952:26958 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1080229889
[  416.378192] binder: 26952:26958 unknown command 0
07:03:11 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')

07:03:11 executing program 4:
syz_open_dev$loop(0x0, 0x4, 0x0)

07:03:11 executing program 3:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$RTC_WIE_ON(r0, 0x700f)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x6d, 0xfffffffffffffff8, 0x1, 0x20, 0x100}, 0x14)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x700, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xdd}]}]}, 0x58}}, 0x20004085)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:11 executing program 4:
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)

[  416.399665] binder: 26952:26958 ioctl c0306201 20000280 returned -22
07:03:11 executing program 0:
clone(0x8800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)

07:03:11 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:11 executing program 4:
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)

[  416.468241] binder: 26982:26983 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  416.482497] binder: 26982:26983 got reply transaction with no transaction stack
[  416.497282] device lo left promiscuous mode
07:03:11 executing program 5:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

[  416.521780] device lo entered promiscuous mode
[  416.523937] binder: 26982:26983 transaction failed 29201/-71, size 0-0 line 2926
[  416.584000] binder: 26982:27001 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  416.592299] binder: 26982:27001 got reply transaction with no transaction stack
[  416.599831] binder: 26982:27001 transaction failed 29201/-71, size 0-0 line 2926
[  416.608644] binder: undelivered TRANSACTION_ERROR: 29201
[  416.614168] binder: undelivered TRANSACTION_ERROR: 29201
07:03:12 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:12 executing program 4:
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)

07:03:12 executing program 5:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:12 executing program 2:
clone(0xffffffffc, 0x0, 0x0, 0x0, 0x0)
r0 = getpgid(0x0)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040))
shutdown(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100))
wait4(r0, &(0x7f0000000000), 0x8000000a, 0x0)

07:03:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={<r2=>0x0})
setsockopt(r0, 0xb69c, 0xfffffffffffffffe, &(0x7f0000000740)="4d0f0f4a9ac26cdea27eb77d0250e00ac15fdf41be781d0e2a29d20c60b1a312ab1956a90104ad267e2158b9790bb86b6fe9f228196a532c8658b09755ce294cf68c4167ff74fa19ff27a1c01260af7da958b01848423ff0aa3b8bcf07dca0def48cc0a1a7fda18ad79d9dc62c5ae7e900c94a5954e92042d4581d2bdf5976b2891bb768cf1441e8db33f99079f5105dc17930f9727c2d722518fea915d6b1115cf7837bd47dcceec2546a1183fb23021e45ed664cd84c4f628d6c14c620ed06bf954b785d56d3a268f412209d655478acc4b67544193e749999e004d8a742e100000000000000", 0x2a)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={<r3=>0x0})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000004c0)=0x29c7)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0xa0, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r1}], &(0x7f00000002c0)=[0x30]}, 0x7fffffff}}, @transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x20, &(0x7f0000000580)=[@fda={0x66646185, 0x6, 0x2, 0x8}], &(0x7f00000005c0)=[0x48, 0x30, 0x38, 0x78]}}, @clear_death={0x400c630f, 0x1, 0x3}], 0xb9, 0x0, &(0x7f0000000840)="4bdd573327af14b6291afc842ba26302494047a4a37b99baa586c4e1908c662cfd6d171a9d089e9fce95bf136def55b2990f79723d6ce3f049eacf7a0b166bafbf8322425164e30fbbd451bd55a2e4f7b88a6f179a227854d6e1dc79f495266d54bbfb66ebb30c69549dd67cc60274aaaa81345943b392e69e0254f6219d532858897bc30057c4942faaa65b2f5d30b3431863d607b2cb1c0f1a7e3811c75d3e2b14e13ee78a017d2fd2aafe21362c1aa2ac9218e8925c5c43"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xb0, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x30, &(0x7f00000000c0)=[@fda={0x66646185, 0x6, 0x2, 0x33}, @fda={0x66646185, 0x3, 0x1, 0x18}, @flat={0x77682a85, 0x100, r2, 0x2}], &(0x7f0000000140)=[0x20, 0x48, 0x38, 0x0, 0x0, 0x40]}, 0x2}}, @free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x20, 0x20, &(0x7f00000001c0)=[@fda={0x66646185, 0x2, 0x1, 0x3a}], &(0x7f0000000200)=[0x18, 0x48, 0x38, 0x0]}}], 0xa9, 0x0, &(0x7f00000003c0)="45093aa113cdabb64bdba5e0074f493a60ebeeb71262d2395ff5f3a9744b2cf07c287713b264afe29ab1d15bccf1fada1f953e565b76c758383d15729b7039d44cd84d7f56c6e8cc0fc3b9e1975b88beb50c1f4e061f188efa75e64b786202233a96361ea6cc588353322fe6d5d61b2fa5fa66c308932acc5d14b7e9600eabc3b08c84a27bcc767a2506a27d6549adec0529a5c302432a3a2f92b815dc1d1a2e2f31c67eba43288d07"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x26, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000004b140082ccb1f1657b190c63000001634040"], 0x0, 0x0, 0x0})

07:03:12 executing program 5:
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

[  417.193382] binder: 27012:27017 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  417.215481] binder: 27012:27017 got reply transaction with no transaction stack
[  417.236879] binder: 27012:27017 transaction failed 29201/-71, size 88-48 line 2926
[  417.248845] binder: 27012:27029 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  417.259118] binder: 27012:27029 unknown command -2113924021
[  417.269578] binder: 27012:27029 ioctl c0306201 20000540 returned -22
[  417.282059] binder: 27012:27017 BC_DEAD_BINDER_DONE 0000000000000000 not found
07:03:12 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x89t\x00\x00~\xda%\xca\x00\x00')
exit(0xb)
sendfile(r0, r0, 0x0, 0xad)

07:03:12 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(0xffffffffffffffff, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:12 executing program 2:
clone(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

[  417.289444] binder: 27012:27017 got reply transaction with no transaction stack
[  417.297033] device lo left promiscuous mode
[  417.297192] binder: 27012:27029 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  417.303040] device lo entered promiscuous mode
[  417.311606] binder: 27012:27017 transaction failed 29201/-71, size 88-48 line 2926
[  417.320869] binder: 27012:27029 unknown command -2113924021
[  417.326610] binder: 27012:27029 ioctl c0306201 20000540 returned -22
07:03:12 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:12 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(0xffffffffffffffff, &(0x7f0000000100), 0x2a2, 0x10400003)

07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')

07:03:12 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r1, 0x41d, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xae9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4e1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8b7a}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x40000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bpq0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', r3})
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000600)={0x70, 0x4, 0x100000001, 0x3, 0x5})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440))
fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, <r4=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, r0, 0x0, 0xb, &(0x7f00000004c0)='system\x8aem0\x00'}, 0xfffffeaf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30)
getitimer(0x2, &(0x7f0000000400))
wait4(r5, &(0x7f0000000040), 0x40000008, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x12, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x48000)

07:03:12 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x41)
sendfile(r0, r0, 0x0, 0xad)

07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)

07:03:12 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003)

07:03:12 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

07:03:12 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x42c3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x160}}, 0x800)

[  418.011181] binder: 27052:27059 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  418.028599] binder: 27052:27059 got reply transaction with no transaction stack
[  418.045065] binder: 27052:27059 transaction failed 29201/-71, size 0-0 line 2926
07:03:12 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

[  418.077483] binder: undelivered TRANSACTION_ERROR: 29201
[  418.143734] device lo left promiscuous mode
[  418.151950] device lo entered promiscuous mode
07:03:13 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d63400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:13 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

07:03:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

[  418.839061] binder: 27106:27114 unknown command 20996877
[  418.845595] binder: 27106:27114 ioctl c0306201 20000280 returned -22
07:03:13 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x126, &(0x7f0000000000)={@random="48e537383903", @broadcast, [], {@ipv6={0x86dd, {0x401, 0x6, "15ad60", 0xf0, 0x62, 0x1ff, @empty, @remote, {[@dstopts={0x5c, 0x19, [], [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x401}, @calipso={0x7, 0x38, {0xffffffff, 0xc, 0x8, 0x8, [0x5, 0x819, 0x4, 0xc1, 0x1, 0xec2]}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @ra={0x5, 0x2, 0x9}, @generic={0x8, 0x6d, "8c750fd9b6911ca842e0c6e28926397242df87a07c99a5ba5fa73739a29b0685d7cfd6212e2cc7d5f165adca2b8d3162a547d554d4c35956ef9e6ed80964f63a668cb556fecfaca46a2f0cb291c9b79aa1c0eb34f045944a6768590aa7c7e4f6a2664bc51760786d29e78b4a01"}]}], @icmpv6=@mld={0x82, 0x0, 0x0, 0x4, 0x6, @ipv4={[], [], @multicast2}}}}}}}, &(0x7f0000000140)={0x0, 0x4, [0x3d3, 0x19c, 0x574, 0xc02]})
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:13 executing program 0:
clone(0x3fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x3ffe, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00')
exit(0x9a)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6f, 0x42a98999, 0x0, 0x1f, 0xe, 0x11, "2e8bc4744f1dd9bc2a23a828128c1aabc5d4f9f75831305d458b79bd6937c7866fb7548c5902e563f1376a72f857b929042b6c51c87ca6e03318580a3d917fe2", "6c8d7449843544b39b45fdaf600387ae11d7c0042dd99952fc7c519f7c9c271e5ac1bb5b95d464488a12137ab6da8e0ac6a1edf2d445d125b8c0accd8dc9e60c", "d099952d28b296ecb96d731f833414c4e054031abaea7800e1db4148d31027db", [0x401, 0x3]})
ioctl$EVIOCRMFF(0xffffffffffffff9c, 0x40044581, &(0x7f0000000180)=0x5)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="6f4f02029db6028d3ee48496784e8900020f23cbbd9418074b514c12db9e5ab37f6104fdb59f6b111b6b7d5afbd51cbdce1045a9241aba6d429636e40d48924820f44c532e7ba09e6a1fb0bbd3f6d3d30cffcf0524532ebbb10096c03277a1fa2b43d229443672f2633b7a57ce0935f534c1a91257d91ca239", 0x79}, {&(0x7f0000000040)="74ff6c72f3f6a5e312734839f11b7ea0d6210d2613485eb02b7c570c3d0bb8a92a15d3b70237fa724fea6dbbe4", 0x2d}], 0x2, 0x1)
sendfile(r1, r1, 0x0, 0xad)
fcntl$getown(r1, 0x9)

07:03:13 executing program 4:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x414, 0xc}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38)

07:03:13 executing program 3:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x1, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x70113, r0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

07:03:13 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

[  418.899528] device lo left promiscuous mode
[  418.905010] device lo entered promiscuous mode
[  418.939613] binder: 27126:27131 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
07:03:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

[  418.953595] binder: 27126:27131 got reply transaction with no transaction stack
[  418.961135] binder: 27126:27131 transaction failed 29201/-71, size 0-0 line 2926
[  418.970618] binder: 27126:27140 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  418.977861] binder: 27126:27140 got reply transaction with no transaction stack
[  418.986079] binder: 27126:27140 transaction failed 29201/-71, size 0-0 line 2926
[  418.994781] binder: undelivered TRANSACTION_ERROR: 29201
07:03:13 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
finit_module(r0, &(0x7f0000000100)='em1.vboxnet0//\x00', 0x3)
exit(0x400)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4)
sendfile(r0, r0, 0x0, 0xad)

[  419.000397] binder: undelivered TRANSACTION_ERROR: 29201
07:03:14 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

07:03:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d6200000e630c400100000023a6d6c03768aaebb96300000163502f398215090fb73385ed4b34d44c5a5db1f6c083e8c2bfcc7e520fb52bae420322541352d6371795fb7931b9527cea7bb24df440bc1d6ba9182855d07059e520ea746dd2c94d241c3b7d49944eb63958ede878e4d5e7798140624864376a9414724616757b134c222a0a4522a27fccadcc2e3f5546541876a5815cea3b37540e63538dbdd0d19921f4f9ab276430682cb1d301f3c8710731cd1f7ea8da740f63f5c3fe61483321e0ab83d3bd4fc2a287fe730b23c846cfaafcd153c2e2ba0700c59a8de0295e2502b505f8243edd5799a609257b32ba"], 0x0, 0x0, 0x0})

07:03:14 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @empty}, {0x7, @random="8ad6df6ea9fd"}, 0x0, {0x2, 0x4e20, @remote}, 'veth0_to_hsr\x00'})
exit(0x0)
sendfile(r0, r0, 0x0, 0x1)

07:03:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

[  419.661214] binder: 27157:27160 unknown command 25101
[  419.669222] binder: 27157:27160 ioctl c0306201 20000280 returned -22
[  419.708259] device lo left promiscuous mode
[  419.713549] device lo entered promiscuous mode
07:03:14 executing program 2:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x80)
accept(r0, &(0x7f00000000c0)=@x25, &(0x7f0000000140)=0x80)
clone(0x20080000, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

07:03:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d6300000e630c40010000000300000000660000006300000163060000"], 0x0, 0x0, 0x0})

07:03:14 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)

07:03:14 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x3, 0x77, "c139d59409d671276a8e3006de235c303bf4f7e1b11eba865f9b4b22dbb5ccc1ac1eb9023da5af1997931a1557da3afe786a9dfde5505dcb86a77cc4dcb117c5c0b997e5405fe9ee315d12a726196ec9ed700342f5f8117236b77e80135fe4a24546dd12c8fdbaf88d1c82db4df575bdd6900f7e22d770"})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
setsockopt$inet_mreqsrc(r0, 0x0, 0x20000000025, &(0x7f0000000040)={@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffe9f)
exit(0x0)
sendfile(r1, r1, 0x0, 0xad)

07:03:14 executing program 0:
clone(0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
r1 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$get_keyring_id(0x0, r1, 0x20)
sendfile(r0, r0, 0x0, 0xad)
pipe(&(0x7f0000000000))

07:03:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = dup(r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0}, &(0x7f0000000140)=0xc)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x36, 0x4, @tid=r2}, &(0x7f00000001c0))
getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d7300000e630c400163404000000000000000000000000000000000"], 0x0, 0x0, 0x0})

07:03:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})

[  419.803231] binder: 27177:27179 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  419.813584] binder: 27177:27179 unknown command 25344
[  419.825459] binder: 27177:27179 ioctl c0306201 20000280 returned -22
07:03:14 executing program 2:
clone(0x20000000, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/248, &(0x7f0000000140)=0xf8)

07:03:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x50, &(0x7f0000000080)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x4)

[  419.868389] binder: 27197:27200 unknown command 29453
[  419.873978] binder: 27197:27200 ioctl c0306201 20000280 returned -22
[  419.885563] binder: 27197:27204 unknown command 29453
[  419.891593] binder: 27197:27204 ioctl c0306201 20000280 returned -22
[  419.914676] binder: 27208:27211 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  419.922172] binder: 27208:27211 got reply transaction with no transaction stack
[  419.929787] binder: 27208:27211 transaction failed 29201/-71, size 0-0 line 2926
[  419.939310] binder: undelivered TRANSACTION_ERROR: 29201
[  419.940877] binder: 27208:27211 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  419.956119] binder: 27208:27211 got reply transaction with no transaction stack
[  419.964179] binder: 27208:27211 transaction failed 29201/-71, size 0-0 line 2926
[  419.971995] binder: undelivered TRANSACTION_ERROR: 29201
07:03:15 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})

07:03:15 executing program 5:
setrlimit(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})

07:03:15 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
shutdown(r2, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)={{0x107, 0xfff, 0x9, 0x1d3, 0x19a, 0x800, 0xf5}, "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a20)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})

07:03:15 executing program 5:
setrlimit(0x0, &(0x7f0000000100)={0x0, 0xfffffffffffffffe})

07:03:15 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:03:15 executing program 5:
setrlimit(0x0, 0x0)

[  420.479003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=467 sclass=netlink_route_socket pig=27223 comm=syz-executor.3
[  420.493269] binder: 27221:27223 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  420.508669] binder: 27221:27223 got reply transaction with no transaction stack
[  420.523019] binder: 27221:27223 transaction failed 29201/-71, size 720295594978967552-1760936591827 line 2926
[  420.546354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=467 sclass=netlink_route_socket pig=27223 comm=syz-executor.3
[  420.563120] binder: 27221:27233 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  420.563828] binder: undelivered TRANSACTION_ERROR: 29201
[  420.572858] binder: 27221:27233 got reply transaction with no transaction stack
[  420.588229] device lo left promiscuous mode
[  420.599322] device lo entered promiscuous mode
[  420.607602] binder: 27221:27233 transaction failed 29201/-71, size 720295594978967552-1760936591827 line 2926
[  420.618023] binder: undelivered TRANSACTION_ERROR: 29201
07:03:15 executing program 5:
setrlimit(0x0, 0x0)

07:03:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:03:15 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0xad)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000))

07:03:15 executing program 2:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)

07:03:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x171)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/30)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x0, 0x0)

07:03:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:03:15 executing program 5:
setrlimit(0x0, 0x0)

[  420.731061] binder: 27257:27258 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  420.739720] binder: 27257:27258 got reply transaction with no transaction stack
[  420.751600] binder: 27257:27258 transaction failed 29201/-71, size 0-0 line 2926
[  420.766238] binder: 27257:27258 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  420.774253] binder: 27257:27258 got reply transaction with no transaction stack
[  420.774264] binder: undelivered TRANSACTION_ERROR: 29201
[  420.782724] binder: 27257:27258 transaction failed 29201/-71, size 0-0 line 2926
[  420.795192] binder: undelivered TRANSACTION_ERROR: 29201
07:03:16 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:03:16 executing program 5:
clone(0x20000000, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000180), 0x80000002, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/248, &(0x7f0000000140)=0xf8)

07:03:16 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x54)
exit(0x0)
mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x50, r0, 0x0)
sendfile(r0, r0, 0x0, 0xad)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0)

07:03:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7f)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00@\x00', 0x101})
pipe(&(0x7f0000000040))

07:03:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d6300000e630c400100000002000000000000000c63000001634040"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x5)

07:03:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:03:16 executing program 0:
clone(0x2102005ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x7ff)
exit(0x8)
set_robust_list(&(0x7f0000000100)={0x0, 0xfffffffffffffc8a, &(0x7f00000000c0)={&(0x7f0000000040)}}, 0x18)
close(r0)
sendfile(r0, r0, 0x0, 0xad)

07:03:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  421.306880] binder: 27275:27278 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  421.318578] binder: 27275:27278 got reply transaction with no transaction stack
[  421.347082] binder: 27275:27278 transaction failed 29201/-71, size 0-0 line 2926
[  421.369452] binder: 27275:27296 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  421.371872] binder: undelivered TRANSACTION_ERROR: 29201
[  421.377079] binder: 27275:27296 got reply transaction with no transaction stack
[  421.390083] binder: 27275:27296 transaction failed 29201/-71, size 0-0 line 2926