[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   12.598771] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   17.403235] random: sshd: uninitialized urandom read (32 bytes read)
[   17.955674] random: sshd: uninitialized urandom read (32 bytes read)
[   18.940741] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.15.202' (ECDSA) to the list of known hosts.
[   24.454795] random: sshd: uninitialized urandom read (32 bytes read)
2018/07/12 11:44:37 fuzzer started
[   25.587648] random: cc1: uninitialized urandom read (8 bytes read)
2018/07/12 11:44:39 dialing manager at 10.128.0.26:46217
2018/07/12 11:44:43 syscalls: 1197
2018/07/12 11:44:43 code coverage: enabled
2018/07/12 11:44:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/07/12 11:44:43 setuid sandbox: enabled
2018/07/12 11:44:43 namespace sandbox: enabled
2018/07/12 11:44:43 fault injection: CONFIG_FAULT_INJECTION is not enabled
2018/07/12 11:44:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/07/12 11:44:43 net packed injection: enabled
[   31.348148] random: crng init done
11:45:44 executing program 0:

11:45:44 executing program 2:

11:45:44 executing program 7:

11:45:44 executing program 3:

11:45:44 executing program 4:

11:45:44 executing program 5:

11:45:44 executing program 6:

11:45:44 executing program 1:

[   90.723771] IPVS: Creating netns size=2536 id=1
[   90.781467] IPVS: Creating netns size=2536 id=2
[   90.850553] IPVS: Creating netns size=2536 id=3
[   90.897409] IPVS: Creating netns size=2536 id=4
[   90.949835] IPVS: Creating netns size=2536 id=5
[   91.006713] IPVS: Creating netns size=2536 id=6
[   91.079118] IPVS: Creating netns size=2536 id=7
[   91.152500] IPVS: Creating netns size=2536 id=8
[   91.447506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   91.515161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   91.547268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   91.616584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   91.627141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   91.671328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   91.807425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   91.873763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   91.882267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   91.891405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   91.940999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   91.954919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   91.984279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   92.031697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   92.039273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   92.057976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   92.083086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   92.132311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   92.150881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   92.177576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   92.214520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   92.227330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   92.237496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   92.259204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   92.278804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   92.303677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   92.332863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   92.363874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   92.375322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   92.385481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   92.397170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.407036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.427018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   92.441384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   92.449460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   92.458281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   92.472113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.479604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.492295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.499741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.508349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   92.516172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   92.531508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   92.542294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   92.560720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.568239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.581802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   92.603280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   92.627733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   92.641074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   92.648975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.657283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.672230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   92.687134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   92.710804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.719010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.744769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   92.788842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   92.810323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   92.834246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   92.882213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   92.889609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.902602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.912138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   92.948738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   92.963596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   92.975003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.984322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.992157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.999553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.009978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   93.020930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   93.028695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.040844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.048482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   93.056319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   93.064445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   93.104716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   93.119778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   93.133675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.144676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.155895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   93.164609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   93.175726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   93.187199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.201969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.209526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.219131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.226953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.234485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.246636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   93.264466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.277926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.299452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   93.315318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.327766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   96.384541] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   96.418002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   96.551599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   96.557750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.568633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.635796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   96.649696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.657779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.774074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   96.809984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   96.924323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   96.965016] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   96.975572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.982986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.997503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   97.057311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   97.071649] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   97.092618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.099376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.145483] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   97.156521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.165149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.175640] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   97.183783] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   97.190992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.200677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.297973] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   97.312729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.320575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.335869] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   97.353346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.360048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
11:45:51 executing program 2:
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c})

11:45:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0)

11:45:51 executing program 0:
r0 = socket$inet6(0xa, 0x100000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rt_sigaction(0x3e, &(0x7f0000000200)={0x3, {0x7fff}, 0x8000000, 0x200}, &(0x7f0000000240), 0x8, &(0x7f0000000280))

11:45:51 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={"6c6f0000ffffff9f0000ddff00"})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff})

11:45:51 executing program 0:
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c})

11:45:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x4000010000200)

[   98.103478] device lo entered promiscuous mode
11:45:51 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000340)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$VT_RESIZE(r1, 0x402c542c, &(0x7f0000000000))
syz_open_pts(0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)

11:45:51 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
close(r0)

11:45:51 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0xf7)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000002c0)=""/107)
ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d34578f762070")
timer_create(0x0, &(0x7f0000000000)={0x0, 0x15, 0x0, @thr={&(0x7f0000000180), &(0x7f00000000c0)}}, &(0x7f0000000240))
timer_getoverrun(0x0)

11:45:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x15, 0x80005, 0x0)
clock_gettime(0x0, &(0x7f0000002540)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f00000023c0)=[{{&(0x7f0000000f80)=@ax25, 0x80, &(0x7f0000002140), 0x0, &(0x7f0000002180)=""/151, 0x97}}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/38, 0x26}}], 0x2, 0x2001, &(0x7f0000002580)={0x0, r2+30000000})

11:45:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000002680)={0x14, 0x0, 0x1}, 0x14}, 0x1}, 0x0)

11:45:51 executing program 2:
r0 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000000)={0x0, 0xab8}, 0x10)

11:45:51 executing program 3:
clock_gettime(0xfffffffffffffffd, &(0x7f0000000900))

11:45:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:45:52 executing program 4:
mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
accept(0xffffffffffffff9c, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80)
madvise(&(0x7f0000094000/0x3000)=nil, 0x3000, 0x10200000008)

11:45:52 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00')
write$evdev(r0, &(0x7f0000000080), 0x0)

11:45:52 executing program 5:
syz_emit_ethernet(0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe0000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000d5c9de9e"], &(0x7f00000002c0))

11:45:52 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x5, 0x5a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'syz_tun\x00', 'ip_vti0\x00', 'ip_vti0\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x2e8, 0x2e8, 0x318, [@mark_m={'mark_m\x00', 0x18}, @bpf0={'bpf\x00', 0x210}]}}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x2, [{{{0x0, 0x0, 0x0, 'syzkaller1\x00', 'bond_slave_1\x00', 'rose0\x00', 'veth1\x00', @random="4cbdc573f192", [], @empty, [], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x0, 0x41f079d61302c615, 0x18, 'eql\x00', 'bridge0\x00', 'bridge0\x00', 'veth0_to_bridge\x00', @random="242ab6d9d317", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xd770ff1170c3a10a, 0xff, 0xff, 0x0, 0xff, 0x9ef422ab69209a7d], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x20, 0x88ca, 'ip6_vti0\x00', 'veth0_to_team\x00', 'gre0\x00', 'gretap0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x20, 0xfffffffffffffffb}}}}]}]}, 0x620)

11:45:52 executing program 7:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x7, 0x848, [0x0, 0x20000700, 0x20000870, 0x20000c10], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'gretap0\x00', 'erspan0\x00', 'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xe0, 0x110, 0x140, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x6}}}]}, [@common=@STANDARD={'\x00', 0x8}]}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x0, 'ip_vti0\x00', 'veth1_to_bridge\x00', 'bridge_slave_0\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x138, [@cgroup0={'cgroup\x00', 0x8}, @cpu={'cpu\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x3, 0x0, 0x0, 'lo\x00', 'veth1_to_bond\x00', 'veth1_to_bridge\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x70, 0x1e8, 0x238}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syzkaller1\x00', 'ipddp0\x00', 'veth1_to_bond\x00', 'dummy0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb8, 0x168, 0x1e0, [@ip={'ip\x00', 0x20, {{@broadcast=0xffffffff, @multicast2=0xe0000002}}}]}, [@common=@mark={'mark\x00', 0x10}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "7600353daa295377e671a00df6b15af28b74f48bdb23537cf2fc2e7ab3c6351c4e3ca3e0045b2fde13a6a7244331b9e1a7f4c7276ae3d92d86db05cd8a462cfc"}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "ec46e93e7a793d1e3075c4782c5c7c734af13b2529d9c53142b5070f90baf3b642be8a861d6c43404432e3285dd777e4c0b5044efc4bf7b04dd2ce0792c7ca1b"}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x1, [{{{0x7, 0x4, 0x8af3, 'nr0\x00', 'ip_vti0\x00', 'bcsh0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0xb0, 0xf8, [@connbytes={'connbytes\x00', 0x18, {{0x4, 0x8, 0x0, 0x3}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"7e5e253246851f86deb2866484d8da72850bf59827b473ce151df88fdb83"}}}]}]}, 0x8c0)

11:45:52 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000380)={0x7, 0x7b, 0x1}, 0x7)

11:45:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:45:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000100), 0x8)
mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

11:45:52 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
close(r0)

11:45:52 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x3, 0x520, [0x20000500, 0x0, 0x0, 0x20000530, 0x20000640], 0x0, &(0x7f0000000140), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'teql0\x00', 'bond_slave_1\x00', 'bond_slave_1\x00', 'ip6gre0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xe0, [@cluster={'cluster\x00', 0x10, {{0x8000}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'team_slave_0\x00', '\x00', 'bridge0\x00', 'gre0\x00', @empty, [], @random="1a0538d190dd", [], 0xb0, 0x138, 0x268, [@owner={'owner\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:netutils_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth1_to_bridge\x00', 'yam0\x00', '\x00', 'veth0_to_bridge\x00', @random="9c6fd05736b7", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb0, 0xe8, 0x118, [@devgroup={'devgroup\x00', 0x18, {{0x8, 0x80, 0x8, 0x4, 0xd2bd}}}]}, [@snat={'snat\x00', 0x10, {{@random="bf393a482b6e", 0xffffffffffffffff}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x80}}}}]}]}, 0x598)

11:45:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:45:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000580)=@nl, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/221, 0xdd}}, {{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000480)=""/109, 0x6d}], 0x4, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x3, 0x0, &(0x7f00000000c0)={0x77359400})

11:45:52 executing program 6:
socket$inet6(0xa, 0x0, 0x0)
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8)
timer_create(0x2, &(0x7f0000044000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000))

11:45:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="693eea033ccdda6456816f800000000000000014b7bf0a26f7a2033c9050942c1759477bb7124ba1da9dc9c483293c7585999bf24d388e26f98744440251cf4246249c319cefa7c590354d09a09d4c1a36b9142bdb76e4f517c95622e37142079896c96378071106eeefa4663015289275a01707c8"], 0x1}, 0x1}, 0x0)

11:45:52 executing program 2:
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

11:45:52 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c000000, &(0x7f0000000280)})
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:52 executing program 2:
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00')
rename(&(0x7f00000f7ff0)='./control/file0\x00', &(0x7f0000000140)='./file0\x00')
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./control/file0\x00')
dup2(r0, r1)

11:45:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:45:52 executing program 1:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040))

11:45:52 executing program 6:
clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480))

[   99.394364] binder: BINDER_SET_CONTEXT_MGR already set
[   99.402343] binder: 6946:6970 ioctl 40046207 0 returned -16
[   99.413160] binder_alloc: 6946: binder_alloc_buf, no vma
[   99.414026] binder: release 6946:6953 transaction 2 out, still active
[   99.414170] binder: send failed reply for transaction 2, target dead
[   99.432363] binder: 6946:6953 transaction failed 29189/-3, size 0-0 line 3141
11:45:53 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001380)=""/144)

11:45:53 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040))

11:45:53 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:53 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
timer_create(0xffbffffffffffff0, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400))
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000180))

[   99.560634] binder: 6980:6983 ERROR: BC_REGISTER_LOOPER called without request
11:45:53 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
close(r0)

11:45:53 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c000000, &(0x7f0000000280)})
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:53 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="693eea033ccdda6456816f800000000000000014b7bf0a26f7a2033c9050942c1759477bb7124ba1da9dc9c483293c7585999bf24d388e26f98744440251cf4246249c319cefa7c590354d09a09d4c1a36b9142bdb76e4f517c95622e37142079896c96378071106eeefa4663015289275a01707c8"], 0x1}, 0x1}, 0x0)

11:45:53 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c)

11:45:53 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x8010000000000088)
sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c)

11:45:53 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001380)=""/144)

11:45:53 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000000000000100000000000000"], 0x28}}], 0x1, 0x0)

11:45:53 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")

11:45:53 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)

[  100.204014] binder: BINDER_SET_CONTEXT_MGR already set
[  100.225024] binder: 6996:7007 ioctl 40046207 0 returned -16
[  100.244430] binder: send failed reply for transaction 5 to 6996:7007
11:45:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070")
creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002000)=ANY=[@ANYBLOB="7f"], 0x1)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000))

11:45:53 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff)

11:45:53 executing program 3:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:53 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c000000, &(0x7f0000000280)})
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  100.263330] binder: 6980:6983 ioctl c0306201 200000c0 returned -14
[  100.301170] binder: BINDER_SET_CONTEXT_MGR already set
11:45:53 executing program 2:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
write$binfmt_misc(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1012)
ioctl(r1, 0x8912, &(0x7f00000000c0)="075cc8236d345f8f762070")
openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x301000, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)
r3 = getpgrp(0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000001240)=r3)
socket(0xa, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000140)=0x400000001, 0x0)

[  100.315628] binder: 6980:7035 ioctl 40046207 0 returned -16
[  100.323850] binder_alloc: 6980: binder_alloc_buf, no vma
11:45:53 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:53 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getitimer(0x0, &(0x7f0000000100))
ioctl(r0, 0x8912, &(0x7f00000000c0)="075cc8236d345f8f762070")
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003080), 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)

[  100.323878] binder: 7031:7036 transaction failed 29189/-3, size 0-0 line 3141
[  100.327905] binder: release 7033:7039 transaction 8 out, still active
[  100.333177] binder: send failed reply for transaction 8, target dead
[  100.397246] binder: 7054:7055 ERROR: BC_REGISTER_LOOPER called without request
11:45:54 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
close(r0)

11:45:54 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c000000, &(0x7f0000000280)})
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:54 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="693eea033ccdda6456816f800000000000000014b7bf0a26f7a2033c9050942c1759477bb7124ba1da9dc9c483293c7585999bf24d388e26f98744440251cf4246249c319cefa7c590354d09a09d4c1a36b9142bdb76e4f517c95622e37142079896c96378071106eeefa4663015289275a01707c8"], 0x1}, 0x1}, 0x0)

11:45:54 executing program 3:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:54 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='/exe\x00\x00\x00\x00\x00\x00')
fstat(r0, &(0x7f00000017c0))

11:45:54 executing program 2:
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000380)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c)

11:45:54 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000))

11:45:54 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c000000, &(0x7f0000000280)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:54 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

[  101.113039] binder: BINDER_SET_CONTEXT_MGR already set
[  101.118422] binder: 7061:7064 ioctl 40046207 0 returned -16
[  101.127564] binder: send failed reply for transaction 10 to 7061:7064
[  101.134232] binder: 7054:7055 ioctl c0306201 200000c0 returned -14
11:45:54 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88)

11:45:54 executing program 3:
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000380)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c)

11:45:54 executing program 1:
r0 = socket(0x1e, 0x805, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80004000}, 0xfeda)
close(r0)

11:45:54 executing program 2:
r0 = inotify_init()
open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00')

11:45:54 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c000000, &(0x7f0000000280)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  101.169267] binder: 7066:7073 transaction failed 29189/-22, size 0-0 line 3018
[  101.205120] binder: 7079:7083 ERROR: BC_REGISTER_LOOPER called without request
11:45:54 executing program 5:

11:45:54 executing program 2:

[  101.245188] binder: BINDER_SET_CONTEXT_MGR already set
[  101.260223] binder: 7093:7100 ioctl 40046207 0 returned -16
11:45:55 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)

11:45:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0xa, 0x802, 0x88)
r2 = socket$netlink(0x10, 0x3, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c)
writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1)

11:45:55 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="693eea033ccdda6456816f800000000000000014b7bf0a26f7a2033c9050942c1759477bb7124ba1da9dc9c483293c7585999bf24d388e26f98744440251cf4246249c319cefa7c590354d09a09d4c1a36b9142bdb76e4f517c95622e37142079896c96378071106eeefa4663015289275a01707c8"], 0x1}, 0x1}, 0x0)

11:45:55 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000")
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000280))

11:45:55 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="075cc8236d345f8f762070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x5d9)
setsockopt$inet_int(r1, 0x0, 0x4, &(0x7f00000001c0), 0x35)

11:45:55 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0)

11:45:55 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:55 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:55 executing program 3:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280))
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
sendfile(r0, r2, &(0x7f00000000c0), 0x80000002)

11:45:55 executing program 1:

11:45:55 executing program 1:

11:45:55 executing program 5:

[  102.124758] binder: 7132:7136 ERROR: BC_REGISTER_LOOPER called without request
[  102.133656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25924 sclass=netlink_route_socket pig=7139 comm=syz-executor3
[  102.152341] binder: BINDER_SET_CONTEXT_MGR already set
11:45:55 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:55 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:55 executing program 2:

11:45:55 executing program 1:

[  102.152349] binder: 7131:7137 ioctl 40046207 0 returned -16
[  102.161085] binder: send failed reply for transaction 15 to 7131:7137
[  102.161099] binder: 7132:7136 ioctl c0306201 200000c0 returned -14
[  102.161291] binder: undelivered TRANSACTION_ERROR: 29201
[  102.228319] binder: 7146:7156 ERROR: BC_REGISTER_LOOPER called without request
[  102.230410] binder: release 7147:7155 transaction 17 out, still active
[  102.246339] binder: send failed reply for transaction 17, target dead
[  102.280434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25924 sclass=netlink_route_socket pig=7139 comm=syz-executor3
11:45:56 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:56 executing program 5:

11:45:56 executing program 4:

11:45:56 executing program 1:

11:45:56 executing program 2:

11:45:56 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:56 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:56 executing program 3:

11:45:56 executing program 5:

11:45:56 executing program 2:

11:45:56 executing program 3:

11:45:56 executing program 5:

11:45:56 executing program 4:

11:45:56 executing program 2:

11:45:56 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
getrandom(&(0x7f0000000480)=""/217, 0xfffffffffffffefb, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000400))
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000180)='rose0\x00')
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
tkill(r0, 0x1000000000016)
getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))

11:45:56 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  103.067266] binder: 7178:7181 ERROR: BC_REGISTER_LOOPER called without request
[  103.078619] binder: release 7179:7183 transaction 19 out, still active
[  103.101218] binder: send failed reply for transaction 19, target dead
[  103.146590] binder: release 7193:7200 transaction 21 out, still active
[  103.172222] binder: send failed reply for transaction 21, target dead
11:45:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:57 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:57 executing program 3:

11:45:57 executing program 5:

11:45:57 executing program 2:

11:45:57 executing program 4:

11:45:57 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:57 executing program 1:

11:45:57 executing program 1:

11:45:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:57 executing program 5:

11:45:57 executing program 2:

11:45:57 executing program 4:

11:45:57 executing program 3:

11:45:57 executing program 4:

11:45:57 executing program 2:

11:45:57 executing program 5:

[  103.907460] binder: 7211:7221 ERROR: BC_REGISTER_LOOPER called without request
[  103.922792] binder: release 7217:7222 transaction 23 out, still active
11:45:57 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:57 executing program 1:

11:45:57 executing program 4:

11:45:57 executing program 5:

11:45:57 executing program 3:

11:45:57 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:57 executing program 2:

11:45:57 executing program 5:

[  103.960933] binder: send failed reply for transaction 23, target dead
11:45:57 executing program 3:

11:45:57 executing program 4:

11:45:57 executing program 1:

11:45:57 executing program 2:

11:45:57 executing program 4:

11:45:57 executing program 3:

11:45:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_nanosleep(0x7, 0x0, &(0x7f0000000240), &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  104.040069] binder: release 7247:7253 transaction 25 out, still active
[  104.048680] binder: BINDER_SET_CONTEXT_MGR already set
[  104.113155] binder: send failed reply for transaction 25, target dead
[  104.119816] binder: 7250:7256 ioctl 40046207 0 returned -16
[  104.122107] binder: 7250:7256 ERROR: BC_REGISTER_LOOPER called without request
11:45:58 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:58 executing program 1:

11:45:58 executing program 5:

11:45:58 executing program 2:

11:45:58 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:58 executing program 3:

11:45:58 executing program 4:

11:45:58 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_nanosleep(0x7, 0x0, &(0x7f0000000240), &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:58 executing program 2:

11:45:58 executing program 3:

11:45:58 executing program 4:

11:45:58 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:58 executing program 1:

11:45:58 executing program 5:

11:45:58 executing program 3:

11:45:58 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_nanosleep(0x7, 0x0, &(0x7f0000000240), &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  104.846724] binder: release 7280:7283 transaction 27 out, still active
[  104.867309] binder: send failed reply for transaction 27, target dead
[  104.921182] binder: 7293:7298 ERROR: BC_REGISTER_LOOPER called without request
[  104.921880] binder_alloc: 7293: binder_alloc_buf, no vma
[  104.921896] binder: 7295:7300 transaction failed 29189/-3, size 0-0 line 3141
11:45:59 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:59 executing program 3:

11:45:59 executing program 4:

11:45:59 executing program 1:

11:45:59 executing program 2:

11:45:59 executing program 5:

11:45:59 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:45:59 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:45:59 executing program 4:

11:45:59 executing program 1:

11:45:59 executing program 5:

11:45:59 executing program 2:

11:45:59 executing program 1:

11:45:59 executing program 2:

11:45:59 executing program 4:

[  105.711012] binder: 7317:7320 transaction failed 29189/-22, size 0-0 line 3018
11:45:59 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  105.759194] binder: 7311:7313 ERROR: BC_REGISTER_LOOPER called without request
[  105.796760] binder_alloc: 7311: binder_alloc_buf, no vma
[  105.804647] binder: 7337:7340 transaction failed 29189/-3, size 0-0 line 3141
11:45:59 executing program 6:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:45:59 executing program 3:

11:45:59 executing program 2:

11:45:59 executing program 4:

11:45:59 executing program 5:

11:45:59 executing program 1:

11:45:59 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  106.542608] binder_alloc: 7348: binder_alloc_buf, no vma
[  106.550097] binder: 7348:7354 transaction failed 29189/-3, size 0-0 line 3141
11:46:00 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:00 executing program 3:

11:46:00 executing program 4:

11:46:00 executing program 1:

11:46:00 executing program 5:

11:46:00 executing program 2:

11:46:00 executing program 6:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:00 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:00 executing program 4:

11:46:00 executing program 1:

11:46:00 executing program 5:

11:46:00 executing program 2:

11:46:00 executing program 2:

11:46:00 executing program 6:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:00 executing program 4:

11:46:00 executing program 5:

[  106.703236] binder_alloc: 7371: binder_alloc_buf, no vma
[  106.744527] binder: 7371:7376 transaction failed 29189/-3, size 0-0 line 3141
11:46:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:01 executing program 1:

11:46:01 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:01 executing program 3:

11:46:01 executing program 2:

11:46:01 executing program 5:

11:46:01 executing program 4:

11:46:01 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:01 executing program 3:

11:46:01 executing program 5:

11:46:01 executing program 4:

11:46:01 executing program 4:

11:46:01 executing program 1:

11:46:01 executing program 3:

11:46:01 executing program 4:

11:46:01 executing program 2:

[  107.612629] binder: 7397:7401 ERROR: BC_REGISTER_LOOPER called without request
[  107.637609] binder: BINDER_SET_CONTEXT_MGR already set
[  107.654725] binder: 7404:7409 ioctl 40046207 0 returned -16
[  107.675364] binder_alloc: 7397: binder_alloc_buf, no vma
[  107.692493] binder: 7404:7409 transaction failed 29189/-3, size 0-0 line 3141
11:46:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:01 executing program 5:

11:46:01 executing program 1:

11:46:01 executing program 3:

11:46:01 executing program 2:

11:46:01 executing program 4:

11:46:01 executing program 7:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:01 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:02 executing program 3:

11:46:02 executing program 2:

11:46:02 executing program 4:

11:46:02 executing program 3:

11:46:02 executing program 4:

11:46:02 executing program 1:

11:46:02 executing program 5:

11:46:02 executing program 2:

[  108.563940] binder: 7432:7434 transaction failed 29189/-22, size 0-0 line 3018
[  108.573538] binder: 7433:7436 ERROR: BC_REGISTER_LOOPER called without request
11:46:02 executing program 5:

11:46:02 executing program 4:

11:46:02 executing program 3:

11:46:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='attr/exec\x00')
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_open_procfs(0x0, &(0x7f0000000940)='net/sctp\x00')

11:46:02 executing program 1:

11:46:02 executing program 7:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:02 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:02 executing program 4:
sync()
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000004c0))

11:46:03 executing program 1:

11:46:03 executing program 5:

11:46:03 executing program 3:

11:46:03 executing program 1:

[  109.553742] binder: 7467:7471 transaction failed 29189/-22, size 0-0 line 3018
11:46:03 executing program 5:

11:46:03 executing program 3:

11:46:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000001340)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x911, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create(0x7fff)

11:46:03 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c)
listen(r1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2}, 0x28)

11:46:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setflags(r1, 0x2, 0x0)

11:46:03 executing program 3:
getrandom(&(0x7f0000000240)=""/17, 0xffffff65, 0x3)

[  109.556106] binder: 7460:7469 ERROR: BC_REGISTER_LOOPER called without request
11:46:03 executing program 4:
sync()
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000004c0))

11:46:03 executing program 7:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x54)

[  109.663687] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  109.690617] binder_alloc: 7460: binder_alloc_buf, no vma
[  109.699053] binder: 7502:7506 transaction failed 29189/-3, size 0-0 line 3141
11:46:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:03 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0xfffffffffffffffb, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90)

11:46:03 executing program 2:
r0 = socket$inet6(0xa, 0x801, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
flock(r0, 0x5)

11:46:03 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fdatasync(r1)

11:46:03 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:03 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0))

11:46:03 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)="6e657c2f68636900f00c41e33234af0720543ef6a5652ecbde20ae9314232cb71b09d46afdbb2a467b5a5d1a0e9b3407f1008d99ef83219c033ea8bae19792")

11:46:03 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:03 executing program 1:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
creat(&(0x7f0000000000)='./file0\x00', 0x0)

11:46:03 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0)
write(r0, &(0x7f00000002c0)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0x10002)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300))

11:46:03 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80}}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x33}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8)

11:46:03 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00'})
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000013002f0f000000000000000000000000", @ANYBLOB="0000000000000000100014000c00010008000200"], 0x2}, 0x1}, 0x0)

[  110.464025] binder_alloc: 7523: binder_alloc_buf, no vma
[  110.480048] binder: BINDER_SET_CONTEXT_MGR already set
11:46:03 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = dup(r1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, &(0x7f00000007c0), 0xfd06, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)

11:46:04 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:04 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000003c0)={0x10000005})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x13})

[  110.480058] binder: 7528:7535 ioctl 40046207 0 returned -16
[  110.480577] binder: 7528:7535 ERROR: BC_REGISTER_LOOPER called without request
[  110.545828] binder: 7523:7526 transaction failed 29189/-3, size 0-0 line 3141
[  110.591549] binder_alloc: 7557: binder_alloc_buf, no vma
[  110.598955] binder: 7557:7558 transaction failed 29189/-3, size 0-0 line 3141
11:46:04 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:04 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00')

11:46:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:04 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:04 executing program 1:
mknod(&(0x7f0000000040)='\x00', 0x0, 0x0)

11:46:04 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

11:46:04 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0)
write(r0, &(0x7f00000002c0)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0x10002)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300))

11:46:04 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:04 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:04 executing program 3:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
syz_open_procfs(r1, &(0x7f0000000000)='limits\x00')

11:46:04 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000240)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "c0c467f36de0a63a2740b8eefefb7f515e6adfda80cd6b382fec3054c2f19d2cd57e5837a0d151300403a6979cf0b8ed562e9370b2183f9671c65cb1d5d6a0"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000840)}, 0x0)

11:46:04 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:04 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0)

[  111.430109] binder: 7587:7596 ERROR: BC_REGISTER_LOOPER called without request
[  111.431578] binder: BINDER_SET_CONTEXT_MGR already set
[  111.431588] binder: 7583:7593 ioctl 40046207 0 returned -16
11:46:04 executing program 3:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth0_to_bond\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6)
close(0xffffffffffffffff)

11:46:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:04 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  111.486084] binder_alloc: 7587: binder_alloc_buf, no vma
[  111.521611] binder: 7583:7593 transaction failed 29189/-3, size 0-0 line 3141
11:46:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:05 executing program 1:
symlink(&(0x7f00000011c0)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

11:46:05 executing program 4:
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)

11:46:05 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000180))

11:46:05 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)

11:46:05 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x75, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10)

[  111.613432] binder: BINDER_SET_CONTEXT_MGR already set
[  111.632314] binder: 7622:7626 ioctl 40046207 0 returned -16
[  111.672636] binder_alloc: 7587: binder_alloc_buf, no vma
[  111.686381] binder: 7622:7626 transaction failed 29189/-3, size 0-0 line 3141
11:46:05 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0)
write(r0, &(0x7f00000002c0)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0x10002)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300))

11:46:05 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:05 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)
close(r1)

11:46:05 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r1 = dup2(r0, r0)
write$P9_RREADDIR(r1, &(0x7f0000000000)={0xb, 0x29}, 0xb)

11:46:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:05 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:05 executing program 1:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x20000004207, r1)
ptrace$setregs(0x13, r1, 0x0, &(0x7f0000000100))

11:46:05 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0)

11:46:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  112.334171] binder: BINDER_SET_CONTEXT_MGR already set
[  112.344506] binder: 7652:7658 ioctl 40046207 0 returned -16
[  112.356367] binder: 7652:7658 ERROR: BC_REGISTER_LOOPER called without request
[  112.364608] binder_alloc: 7651: binder_alloc_buf, no vma
[  112.370239] binder: 7651:7655 transaction failed 29189/-3, size 0-0 line 3141
11:46:05 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:05 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:05 executing program 1:
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:05 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:05 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

[  112.418203] binder_alloc: 7668: binder_alloc_buf, no vma
[  112.424108] binder: 7668:7671 transaction failed 29189/-3, size 0-0 line 3141
11:46:05 executing program 4:
timer_gettime(0x0, &(0x7f0000000140))

11:46:05 executing program 1:
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="7eacae589eb7", [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x29, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [0xc0ffffff], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x4, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}}}}}}, 0x0)

[  112.486098] binder: 7679:7683 transaction failed 29189/-22, size 0-0 line 3018

INIT: Id "3" respawning too fast: disabled for 5 minutes

INIT: Id "5" respawning too fast: disabled for 5 minutes

INIT: Id "2" respawning too fast: disabled for 5 minutes

INIT: Id "4" respawning too fast: disabled for 5 minutes

INIT: Id "6" respawning too fast: disabled for 5 minutes

INIT: Id "1" respawning too fast: disabled for 5 minutes
11:46:06 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0)
write(r0, &(0x7f00000002c0)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0x10002)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300))

11:46:06 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)

11:46:06 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
uname(&(0x7f0000000140)=""/143)

11:46:06 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:06 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:06 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)
close(r1)

11:46:06 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:06 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  113.213401] binder: 7708:7711 transaction failed 29189/-22, size 0-0 line 3018
[  113.227051] binder: 7714:7719 ERROR: BC_REGISTER_LOOPER called without request
[  113.256671] binder: 7722:7723 ERROR: BC_REGISTER_LOOPER called without request
[  113.273383] binder: 7724:7727 transaction failed 29189/-22, size 0-0 line 3018
11:46:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x0)

11:46:06 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:06 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:06 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:06 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)='d', 0x1}], 0x1)

11:46:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r0, &(0x7f000000bd40)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)}}, {{&(0x7f0000000640)=@ax25={0x3, {"096aaff4a7bc2b"}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000002380)=ANY=[]}}], 0x2, 0x0)

[  113.427461] binder: 7734:7741 ERROR: BC_REGISTER_LOOPER called without request
[  113.465757] binder: release 7735:7739 transaction 59 out, still active
[  113.480229] binder: send failed reply for transaction 59, target dead
11:46:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200102}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0)

11:46:07 executing program 4:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000044c0)='./bus\x00', 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8)
r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)
lchown(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)

11:46:07 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:07 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:07 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:07 executing program 1:
symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00')
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))

11:46:07 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)
close(r1)

11:46:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0x0)

11:46:07 executing program 1:
syz_emit_ethernet(0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYBLOB='m^!!}czT'], &(0x7f00000002c0))

[  114.217498] binder: release 7766:7777 transaction 62 out, still active
[  114.235113] binder: send failed reply for transaction 62, target dead
11:46:07 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:07 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:07 executing program 5:
unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)

11:46:07 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/98, 0x5a}], 0x1)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x80092)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000280))

11:46:07 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:07 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:07 executing program 5:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(r0, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0)
unlinkat(r0, &(0x7f0000000540)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0)

[  114.326953] binder: BINDER_SET_CONTEXT_MGR already set
[  114.342597] binder: 7798:7804 ioctl 40046207 0 returned -16
[  114.394220] binder: 7798:7804 transaction failed 29189/-22, size 0-0 line 3018
11:46:08 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @rand_addr}, 0x85, 0x0, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000000200)="6c6f3a00000600"})

11:46:08 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:08 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x30, &(0x7f0000000340)=""/250, &(0x7f0000000140)=0xfa)

11:46:08 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:08 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:08 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:08 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)
close(r1)

11:46:08 executing program 5:
syz_emit_ethernet(0x32, &(0x7f0000015e15)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="8faf6d5cfec8", [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, "", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, "450fd679c8da8c78fcaa4be3e160aad7"}}}}, 0x0)
pipe(&(0x7f0000000180))

11:46:08 executing program 4:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0xffffffffffffff80, 0x0)

11:46:08 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:08 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0x25}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f00000000c0)=""/101, 0x65}], 0x2)
recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0)
sendto$inet(r0, &(0x7f0000000140)="c2", 0x1, 0x0, 0x0, 0x0)

11:46:08 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r0=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r0}, &(0x7f0000000280))
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  115.108923] binder: BINDER_SET_CONTEXT_MGR already set
[  115.123235] binder: 7832:7838 ioctl 40046207 0 returned -16
[  115.131064] binder: release 7832:7838 transaction 67 out, still active
11:46:08 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x0, @multicast2=0xe0000002}, {0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x2, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'bond0\x00'})

11:46:08 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[@generic={0x89, 0x3, "e4"}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, 0x0)

11:46:08 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:08 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:08 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = gettid()
ptrace$setopts(0x4200, r1, 0x100000000, 0x66)
rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='./file0\x00')

11:46:08 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30)

11:46:08 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  115.255959] binder: BINDER_SET_CONTEXT_MGR already set
[  115.263399] binder: 7863:7867 ioctl 40046207 0 returned -16
[  115.309583] binder: release 7863:7867 transaction 68 out, still active
11:46:09 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:09 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:09 executing program 1:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}})

11:46:09 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)

11:46:09 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:09 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:09 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  115.871791] binder: send failed reply for transaction 67, target dead
[  115.884866] binder: send failed reply for transaction 68, target dead
[  115.909538] binder: BINDER_SET_CONTEXT_MGR already set
11:46:09 executing program 5:
add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb)

[  115.917888] binder: 7892:7895 ioctl 40046207 0 returned -16
[  115.927905] binder: release 7892:7895 transaction 70 out, still active
11:46:09 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r0=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r0}, &(0x7f0000000280))
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:09 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:09 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x0, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:09 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$selinux_user(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='s'], 0x1)
rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00')

11:46:09 executing program 5:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02132d01020000008916400000000000"], 0x10}, 0x1}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021200001100000026bd700700009887000000ad6f10babc007900000008001200030000000000e5003800000006003200030800000900000200000000ac1414bb000000000000000000000000ac14142c0000000000000000000000000400040005000000f8450e1d6e43071f000000000700003f00000000000000039d4d56910b000500000001"], 0x88}, 0x1}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

11:46:09 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:09 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:09 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x0, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  116.080095] binder: BINDER_SET_CONTEXT_MGR already set
[  116.086579] binder: 7915:7918 ioctl 40046207 0 returned -16
[  116.103155] binder: release 7915:7918 transaction 71 out, still active
[  116.138524] binder: BINDER_SET_CONTEXT_MGR already set
[  116.145621] binder: 7932:7935 ioctl 40046207 0 returned -16
[  116.154867] binder: release 7932:7935 transaction 72 out, still active
11:46:10 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:10 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:10 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

[  116.689258] binder: send failed reply for transaction 70, target dead
[  116.695960] binder: send failed reply for transaction 71, target dead
[  116.702840] binder: send failed reply for transaction 72, target dead
11:46:10 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)

11:46:10 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x0, 0x0, 0x3}}, 0x2e)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100))

11:46:10 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x0, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:10 executing program 5:

11:46:10 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  116.862529] binder: BINDER_SET_CONTEXT_MGR already set
[  116.872417] binder: 7953:7955 ioctl 40046207 0 returned -16
[  116.888599] binder: release 7953:7955 transaction 74 out, still active
11:46:10 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r0=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r0}, &(0x7f0000000280))
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:10 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:10 executing program 5:

11:46:10 executing program 1:

11:46:10 executing program 4:
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:10 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:10 executing program 5:

11:46:10 executing program 1:

[  117.025187] binder: BINDER_SET_CONTEXT_MGR already set
[  117.052767] binder: 7973:7977 ioctl 40046207 0 returned -16
[  117.067839] binder: release 7973:7977 transaction 75 out, still active
11:46:10 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x0, 0x6c000000, &(0x7f0000000280)})

11:46:10 executing program 4:
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:10 executing program 5:

[  117.523372] binder: send failed reply for transaction 74, target dead
[  117.529965] binder: send failed reply for transaction 75, target dead
[  117.563094] binder: 7992:7993 ERROR: BC_REGISTER_LOOPER called without request
11:46:11 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r0)

11:46:11 executing program 1:

11:46:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:11 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:11 executing program 4:
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  117.813957] binder: release 8002:8007 transaction 78 out, still active
[  117.825046] binder: send failed reply for transaction 78, target dead
11:46:11 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:11 executing program 5:

11:46:11 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x0, 0x6c000000, &(0x7f0000000280)})

11:46:11 executing program 1:

11:46:11 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:11 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:11 executing program 1:

11:46:11 executing program 5:

[  117.933214] binder: 8016:8020 ERROR: BC_REGISTER_LOOPER called without request
[  117.936524] binder: BINDER_SET_CONTEXT_MGR already set
[  117.936532] binder: 8019:8023 ioctl 40046207 0 returned -16
11:46:11 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

[  117.989307] binder: release 8019:8023 transaction 80 out, still active
[  118.019091] binder: send failed reply for transaction 80, target dead
11:46:12 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r1)

11:46:12 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x0, 0x6c000000, &(0x7f0000000280)})

11:46:12 executing program 5:

11:46:12 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d34")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:12 executing program 1:

[  118.733907] binder: BINDER_SET_CONTEXT_MGR already set
[  118.743908] binder: release 8051:8055 transaction 82 out, still active
[  118.752290] binder: 8048:8056 ioctl 40046207 0 returned -16
[  118.755321] binder: send failed reply for transaction 82, target dead
[  118.766280] binder: 8048:8056 ERROR: BC_REGISTER_LOOPER called without request
11:46:12 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:12 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:12 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:12 executing program 5:

11:46:12 executing program 1:

11:46:12 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d34")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:12 executing program 6:

11:46:12 executing program 4:

11:46:12 executing program 5:

11:46:12 executing program 1:

11:46:12 executing program 6:

[  118.913123] binder: release 8067:8082 transaction 84 out, still active
[  118.955051] binder: send failed reply for transaction 84, target dead
11:46:13 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r1)

11:46:13 executing program 4:

11:46:13 executing program 1:

11:46:13 executing program 5:

11:46:13 executing program 6:

11:46:13 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:13 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:13 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d34")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:13 executing program 1:

11:46:13 executing program 5:

11:46:13 executing program 4:

11:46:13 executing program 6:

11:46:13 executing program 1:

11:46:13 executing program 5:

11:46:13 executing program 1:

11:46:13 executing program 6:

[  119.833024] binder: release 8105:8112 transaction 86 out, still active
[  119.879548] binder: send failed reply for transaction 86, target dead
11:46:13 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280))
close(r1)

11:46:13 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f76")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:13 executing program 1:

11:46:13 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f742070")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000080)=0x1c)

11:46:13 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = socket(0x40000000015, 0x5, 0x0)
poll(&(0x7f0000000040)=[{r1}, {r0, 0x2580}], 0x2, 0x0)

[  120.400008] binder: release 8134:8145 transaction 88 out, still active
[  120.416938] binder: send failed reply for transaction 88, target dead
11:46:14 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:14 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup(r1)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0)

11:46:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/180, 0x2f, 0x1, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x80)

11:46:14 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0xc)

11:46:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f76")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:14 executing program 5:
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX])

11:46:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x0, 0x6c000000, &(0x7f0000000280)})

11:46:14 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f76")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040))
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  120.834900] binder: release 8160:8166 transaction 90 out, still active
[  120.855544] binder: send failed reply for transaction 90, target dead
[  120.883170] binder: 8170:8171 ERROR: BC_REGISTER_LOOPER called without request
[  120.907953] binder: BINDER_SET_CONTEXT_MGR already set
[  120.907963] binder: 8178:8182 ioctl 40046207 0 returned -16
[  120.908398] binder_alloc: 8170: binder_alloc_buf, no vma
[  120.908414] binder: 8178:8182 transaction failed 29189/-3, size 0-0 line 3141
[  120.909036] binder: BINDER_SET_CONTEXT_MGR already set
[  120.909043] binder: 8177:8181 ioctl 40046207 0 returned -16
[  120.909763] binder_alloc: 8170: binder_alloc_buf, no vma
[  120.909779] binder: 8177:8181 transaction failed 29189/-3, size 0-0 line 3141
11:46:14 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
socket$inet6(0xa, 0x0, 0x0)
close(r0)
close(r1)

11:46:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:14 executing program 6:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:14 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f7620")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:14 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  121.219704] binder: 8193:8194 ERROR: BC_REGISTER_LOOPER called without request
[  121.232052] binder: release 8197:8201 transaction 95 out, still active
[  121.252599] binder: 8192:8206 ERROR: BC_REGISTER_LOOPER called without request
11:46:14 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x0, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f7620")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

[  121.281941] binder: send failed reply for transaction 95, target dead
[  121.318377] binder: 8209:8212 ERROR: BC_REGISTER_LOOPER called without request
[  121.322729] binder: BINDER_SET_CONTEXT_MGR already set
[  121.322740] binder: 8210:8218 ioctl 40046207 0 returned -16
11:46:14 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x0, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

[  121.367468] binder_alloc: 8209: binder_alloc_buf, no vma
[  121.375761] binder: 8210:8218 transaction failed 29189/-3, size 0-0 line 3141
[  121.376345] binder: BINDER_SET_CONTEXT_MGR already set
[  121.376352] binder: 8219:8223 ioctl 40046207 0 returned -16
11:46:14 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f7620")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  121.376469] binder: 8219:8223 ERROR: BC_REGISTER_LOOPER called without request
[  121.459671] binder: BINDER_SET_CONTEXT_MGR already set
[  121.465200] binder: 8233:8234 ioctl 40046207 0 returned -16
[  121.472647] binder_alloc: 8209: binder_alloc_buf, no vma
[  121.478209] binder: 8233:8234 transaction failed 29189/-3, size 0-0 line 3141
11:46:15 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:15 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x0, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:15 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:15 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:15 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f7620")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

[  122.173625] binder: 8255:8260 ERROR: BC_REGISTER_LOOPER called without request
[  122.182211] binder: BINDER_SET_CONTEXT_MGR already set
[  122.195979] binder: BINDER_SET_CONTEXT_MGR already set
[  122.201726] binder: 8252:8259 ioctl 40046207 0 returned -16
[  122.209541] binder: BINDER_SET_CONTEXT_MGR already set
[  122.215270] binder: BINDER_SET_CONTEXT_MGR already set
11:46:15 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000240)='ns\x00')
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:15 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

[  122.216138] binder_alloc: 8255: binder_alloc_buf, no vma
[  122.216156] binder: 8252:8259 transaction failed 29189/-3, size 0-0 line 3141
[  122.228160] binder: 8253:8258 ioctl 40046207 0 returned -16
[  122.228186] binder: 8256:8261 ioctl 40046207 0 returned -16
11:46:15 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000040)=0x8, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:15 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:15 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000000)=""/136, 0x88)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0963bf1ec102ebd580ea94e3aa371a13c6f46a3d1b"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

[  122.273972] binder: 8265:8267 ioctl 40046207 0 returned -16
[  122.277449] binder_alloc: 8255: binder_alloc_buf, no vma
[  122.277466] binder: 8256:8261 transaction failed 29189/-3, size 0-0 line 3141
[  122.298139] binder: BINDER_SET_CONTEXT_MGR already set
[  122.298147] binder: 8282:8284 ioctl 40046207 0 returned -16
[  122.298212] binder: 8282:8284 unknown command -1753193717
[  122.298218] binder: 8282:8284 ioctl c0306201 200000c0 returned -22
[  122.299876] binder: BINDER_SET_CONTEXT_MGR already set
[  122.299883] binder: 8282:8284 ioctl 40046207 0 returned -16
[  122.299933] binder: 8282:8285 unknown command -1753193717
[  122.299939] binder: 8282:8285 ioctl c0306201 200000c0 returned -22
[  122.302304] binder: BINDER_SET_CONTEXT_MGR already set
[  122.302311] binder: 8273:8281 ioctl 40046207 0 returned -16
[  122.328841] binder: BINDER_SET_CONTEXT_MGR already set
[  122.328849] binder: 8287:8289 ioctl 40046207 0 returned -16
[  122.328898] binder: 8287:8289 unknown command 515859209
[  122.328905] binder: 8287:8289 ioctl c0306201 200000c0 returned -22
[  122.338762] binder: BINDER_SET_CONTEXT_MGR already set
[  122.338770] binder: 8287:8289 ioctl 40046207 0 returned -16
[  122.339859] binder: 8287:8290 unknown command 515859209
[  122.339866] binder: 8287:8290 ioctl c0306201 200000c0 returned -22
[  122.456589] binder_alloc: 8255: binder_alloc_buf, no vma
[  122.462093] binder: 8265:8267 transaction failed 29189/-3, size 0-0 line 3141
11:46:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
getresuid(&(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000280)=<r1=>0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)

11:46:16 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:16 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)})

11:46:16 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={<r2=>0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x4}, @free_buffer={0x40086303, r2}], 0xcd, 0x0, &(0x7f00000002c0)="7823aee752aadf7af6b54281f60a98a1df26b881f117235aa3b7c1fc7453a085baf39f416b8b276a3c16830c5bcee5c3ba10ae4ca2750dc639bac081c2d6a386bc4ba42fe31a04b3c76c8723efb645de3198a6455187f293a66a740bd556fd2adc2ef0f0da4e29a5ce0a4bcf6525ee0a9735b941800dec3aab5b41f3a8acc19b71e85b3cd0c3084170a19ae4164446f795af47cff7db8e5709045919a6bb71d766424d1f822c8e38faee9ee8de27a5df4aed084fedcedd48c2a797efeba36bdb3cb8ff1019e768738e17ba75e4"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000eb67b"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

[  122.912624] binder: BINDER_SET_CONTEXT_MGR already set
[  122.916201] binder: 8296:8298 DecRefs 0 refcount change on invalid ref 4 ret -22
[  122.916209] binder: 8296:8298 BC_FREE_BUFFER u0000000000000000 no match
[  122.948140] binder: 8299:8301 ioctl 40046207 0 returned -16
11:46:16 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400080, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x0)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1, 0x400000)
write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x6}, 0xb)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
epoll_create1(0x80000)

11:46:16 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:16 executing program 1:
clone(0x80000, &(0x7f00000000c0)="5bd640fe0a8c153fa5bb1194ad8837677002df7ccbc3cf48d149e03dc6c4af768273ba8c55c9f80bb7741f3fefc8f9165d017c0a2cadef3b9ee078a081d04d361c5aa7e2a6d04ea287b5ffbba7680b8e35eec0757fa1d744c3956010a439a6a2a669", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="7d207650c87aefff28e046434f519d87b22c68e11f8bc5d4867cc53ee183c51418282097741157610b11ed91a2f00c7b9e88552b021f38682b54cfa7bdbab061bb6a0a3ffb1e1abfe3c444aa7dac491a40bddc33904f6d1f1cf1399614f4c0929c75e25be7422284dc8cce8e7c802249f50b753837ff03061a23f42a7ea6d4e9349db8775fa5b77758d798343165e10c653393d97ef532c976bd31bc6ec07d15fbb83b9dc7732f2a7e919a95c36b338c297359bff33d4fc35acc167e37e071dbe829ff")
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
ustat(0x7, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:16 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000fedffe)})

11:46:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000))
getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000002440)={@remote, <r2=>0x0}, &(0x7f0000002480)=0x14)
sendto$packet(r1, &(0x7f0000000080)="4e8ec1741bd7f222edb62ca13aca22512d7359bd16bdb6cb699dc8089bce540583660a7e33afc6d11e626d60fc12e2d28d2ef4bcec2e35697227409e6a96dc4e7698b6964d92b2924ce1f29d2e523709c84ddb034fdf6c546f2dd56ec2fd31e405f9806500b208f3b5a80866fd8c7f237db4895449f1c3104dfb755b3bbca125bacdffad092fddbddf4d42872d386f42d85ee590ec13df880fab7fbb9faa8d9d4f61fb8077a5f0478df77770a0da4a33a2f692b316765e665031b5bcc0aec37cf0d8bf4171140966f6ba81ecc71076e7", 0xd0, 0x20044084, &(0x7f00000024c0)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:16 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

[  123.108108] binder: 8321:8324 ERROR: BC_REGISTER_LOOPER called without request
[  123.120102] binder: BINDER_SET_CONTEXT_MGR already set
[  123.130683] binder: 8322:8326 ioctl 40046207 0 returned -16
11:46:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
r1 = getpgid(0xffffffffffffffff)
getpgid(r1)

11:46:16 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000))
close(0xffffffffffffffff)
close(0xffffffffffffffff)

11:46:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
setsockopt(r0, 0x3, 0x4, &(0x7f00000000c0)="3fbc8b5b3afe26325b26e25f0aa8ece8961ababe16", 0x15)
getsockopt(r0, 0x1, 0x6, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x14)

11:46:16 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000fedffe)})

11:46:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x3f, 0x101000)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

[  123.256150] binder: BINDER_SET_CONTEXT_MGR already set
[  123.271304] binder: 8349:8354 ioctl 40046207 0 returned -16
[  123.706977] binder: BINDER_SET_CONTEXT_MGR already set
[  123.712331] binder: 8296:8362 ioctl 40046207 0 returned -16
[  123.721759] binder: 8296:8362 unknown command 2075528704
[  123.727250] binder: 8296:8362 ioctl c0306201 200000c0 returned -22
11:46:17 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000))
close(0xffffffffffffffff)
close(0xffffffffffffffff)

[  123.844538] binder: BINDER_SET_CONTEXT_MGR already set
[  123.844546] binder: 8296:8362 DecRefs 0 refcount change on invalid ref 4 ret -22
[  123.844556] binder: 8296:8362 BC_FREE_BUFFER u0000000000000000 no match
[  123.864285] binder: 8296:8363 ioctl 40046207 0 returned -16
[  123.873302] binder: 8296:8362 unknown command 2075528704
[  123.878791] binder: 8296:8362 ioctl c0306201 200000c0 returned -22
11:46:17 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)

11:46:17 executing program 1:
fcntl$getown(0xffffffffffffff9c, 0x9)
getpgid(0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/ip_mr_vif\x00')
fchdir(r1)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000040)=""/144, 0x90}, {&(0x7f00000001c0)=""/88, 0x58}], 0x3)

11:46:17 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4000, 0x0)
mq_timedsend(r1, &(0x7f0000000140)="dfde7e0f62036d4427b50e8770e0e1c4cad62aa8af0cb9f84e4c4d39352b642cc5464cd9ef18108757fb3fc0edc8aaa2f6cebbef0e3da9b85a0fc1dfdea6d0ab4c340ddade17e3e3aa1e32a9bd7fbba4a09115bfb5f3d3d34c066147012c25ccc1c9b3e1c2d18ee73cd7bcb9220dde1b5c1655065c16325d67837ffbafbccb7e487dee0f4c7aa3", 0x87, 0x6, &(0x7f0000000240)={0x0, 0x989680})
r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x40, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1)

11:46:17 executing program 7:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000fedffe)})

11:46:17 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000))
close(0xffffffffffffffff)
close(0xffffffffffffffff)

11:46:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

11:46:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r0, 0x0)

11:46:17 executing program 4:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:17 executing program 7:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00')
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000003200)=@filter={'filter\x00', 0xe, 0x5, 0x90, [0x0, 0x20002b40, 0x20002d98, 0x200030f0], 0x0, &(0x7f0000002b00), &(0x7f0000002b40)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108)

11:46:17 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

[  124.018904] binder: 8375:8379 ERROR: BC_REGISTER_LOOPER called without request
[  124.021340] binder: BINDER_SET_CONTEXT_MGR already set
[  124.021347] binder: 8376:8381 ioctl 40046207 0 returned -16
[  124.027442] binder: BINDER_SET_CONTEXT_MGR already set
[  124.027455] binder: 8380:8386 ioctl 40046207 0 returned -16
11:46:17 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
r1 = getuid()
r2 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="49497f31a2bbd7e1d988a1f7a019310f796c9e7b0ee2bb0a", 0x18, 0xfffffffffffffff8)
keyctl$get_persistent(0x16, r1, r2)

11:46:17 executing program 7:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)
connect(r0, &(0x7f00000012c0)=@nl=@unspec, 0x80)

11:46:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x8)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100))
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x4e20, @loopback=0x7f000001}})
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x1a000)

11:46:18 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00006dc000)}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:18 executing program 4:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:18 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
sendfile(r0, r0, &(0x7f0000000080), 0x8710)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0xc000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:18 executing program 6:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x400, 0x7, 0x9221, 0x10000, 0x4f4d})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
syncfs(r0)
flock(r0, 0x8)

11:46:18 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)

11:46:18 executing program 4:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:18 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r0 = getpgrp(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='ns\x00')
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:18 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:18 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

[  124.935490] binder: BINDER_SET_CONTEXT_MGR already set
[  124.951877] binder: 8375:8425 ioctl 40046207 0 returned -16
[  124.962209] binder: 8375:8422 ERROR: BC_REGISTER_LOOPER called without request
11:46:18 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:18 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)="6ec5ea")
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9)
r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140))
r4 = epoll_create(0x143)
r5 = epoll_create(0x3)
r6 = epoll_create(0x7fffffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000002c0)={0x81})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f000000dff4))
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10041, 0x0)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
fstatfs(r3, &(0x7f0000000300)=""/139)

11:46:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080))
r1 = creat(&(0x7f0000000040)='\x00', 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:19 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00006dc000)}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:19 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f00000002c0)="6e65742f736f636b4b87d86573740ebdd4ad9d5bccea3891226e38653df1335e70c5621e421b94828ceb9cfd4148b52bd3b2c9612544f66d971798d873108e77220ac636f17bb8cf9d66deaa575826494746714ae989c94cff17f23fb69f1cd2b027ec28870337596806c4af9dfec16353c46fb55e7eaae082a64fa964c4f70607981a6112ca9d547bfbd1a8f88b2e85c9bc9f6058d6ad432cd8ea9415307de951")
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = dup3(r0, r0, 0x80000)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630b}], 0xfffffffffffffdf7, 0x6c000000, &(0x7f0000000280)='\b'})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)

11:46:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:19 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:19 executing program 7:
r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0)

11:46:19 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x280000, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)=0x1)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))
r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xb4e5, 0x8000)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)

11:46:19 executing program 1:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4849c0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
bind$packet(r0, &(0x7f0000000380)={0x11, 0x11, r1, 0x1, 0x3ff, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="0700000072020004000000000000001d503ece00000056805d5dffffffffbb091b23f16e72814a53613c2fd2099d2c1fcaeb68fcb59abaf7e8689bba334baa3d5a668440eae915e313704a51ad328c9d4874eb58c29ecc6019d26099ade4b0efbedf9b4498f05c4bb4f65bdc", 0x1ff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[{0x3, 0xc8}, {0x3, 0x4}, {0x2, 0x4f8b}, {0xe, 0x2}, {0x0, 0x401}, {0x7, 0x80000000}, {0x3, 0x200}], 0x7)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x6, {{0xa, 0x4e24, 0x80000000, @mcast1={0xff, 0x1, [], 0x1}, 0xb9}}}, 0x88)

11:46:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x0, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:46:19 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:19 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040))
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:19 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r0=>0x0}, &(0x7f0000000100)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/nfsfs\x00')
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10)
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
fcntl$setflags(r1, 0x2, 0x1)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x35, 0x3, 0x0, {0x6, 0x14, 0x0, "070000007202000400000000000000fb813ece00"}}, 0x35)

11:46:19 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x0, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:19 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
rmdir(&(0x7f0000000280)='./file0\x00')

11:46:19 executing program 7:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040))

[  125.883674] binder: 8483:8502 ERROR: BC_REGISTER_LOOPER called without request
11:46:20 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00006dc000)}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  126.784997] binder: BINDER_SET_CONTEXT_MGR already set
[  126.790363] binder: 8483:8537 ioctl 40046207 0 returned -16
[  126.801753] binder: 8483:8533 ERROR: BC_REGISTER_LOOPER called without request
11:46:20 executing program 6:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000080)=[@fda={0x66646185, 0x2, 0x2, 0x21}, @flat={0x77622a85, 0xa, r1, 0x4}], &(0x7f0000000140)=[0x28, 0x48, 0x0, 0x40]}, 0x1}}], 0x5f, 0x0, &(0x7f00000002c0)="c49d7f0416631b9cf00ab3b0d2474fc480d5bbe438a1ef29ee0edf0c51680f265670be65a4b6efb2a95327c22d39857c5acb75b525ac13157db751711c890f2c165efaca0a969e2d61924e9640ffdd4371ac38b17a9df8d9919843b3c81e81"})
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x188)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
ioctl$sock_proto_private(r0, 0x89e3, &(0x7f00000000c0)="89041dc68737274d165ede255ddea80f98f60b36")
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:20 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040))
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:20 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setlease(r0, 0x400, 0x0)

11:46:20 executing program 7:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000))

11:46:20 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x80, 0x2, 0x4}}, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="07d24700720200040700000000ec00fb813ece000000", 0x1ff)

11:46:20 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x0, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0)

11:46:20 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1}, 0x14}, 0x1}, 0x0)

11:46:20 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040))
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80000000, 0x2b4040)
socketpair(0x11, 0x0, 0x100000000, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000080)=0x6, 0x4)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))

11:46:20 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00')
fchdir(r0)
signalfd(r0, &(0x7f0000000080)={0x7c4}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:20 executing program 7:
clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000907000), &(0x7f0000553000))
getpriority(0x1, 0x0)

11:46:20 executing program 1:
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
r1 = syz_open_procfs(r0, &(0x7f0000000080)="ab00292b681d00000000000000000000")
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7ff, 0x5, 0x0, 0x4, 0x2, 0x3, 0x200, 0x66, 0x38, 0x1b7, 0x8, 0x1, 0x20, 0x1, 0x80, 0x3f, 0x5}, [{0x70000000, 0x6, 0xfffffffffffffffa, 0x9, 0x2, 0xb115, 0x8, 0x400}, {0x5, 0x8, 0x3, 0x9, 0x8001, 0x80000000, 0xfffffffffffffe01, 0xfc2}], "3ae6f31d2f27ec694d9653b6643cb7cb40b5918d06e701681e361a77e9bf8b6b108a9fe24df8ee4d3081351abc97f238469c19d264af417e1b87bf62390be78244dbbd78c018e08c4c306b70231d029a1896a6bf3e689cf22443d022502a66c3e8e6a95b8c44c8d1da7a9bb28fc9f507a9c0ae0de70428a59b5848f472ea1667bb4d33592be9710501917cbe81a4a88a4c721024bad3ab7528bd7a027a9daff012b8f0151710f0107d894b71558a53b41d1253fcbd14b3398c3871eaaaebce90d3920a7e7f596b7b5b4bc7dab75dd4131c5ef7", [[], [], [], [], [], [], [], [], [], []]}, 0xb4b)

11:46:20 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:20 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1}, 0x14}, 0x1}, 0x0)

[  126.910506] binder: 8539:8541 ERROR: BC_REGISTER_LOOPER called without request
11:46:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  127.717084] binder_alloc: binder_alloc_mmap_handler: 8539 20001000-20004000 already mapped failed -16
[  127.730082] binder: BINDER_SET_CONTEXT_MGR already set
[  127.730287] binder: 8539:8593 ERROR: BC_REGISTER_LOOPER called without request
[  127.742713] binder: 8539:8592 ioctl 40046207 0 returned -16
11:46:21 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x7ff)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080))
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x3beea258, 0x6, 0x42, 0x95, 0x9fcf, 0x1ff})

11:46:21 executing program 7:

11:46:21 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:21 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1}, 0x14}, 0x1}, 0x0)

11:46:21 executing program 4:

11:46:21 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='+c\x00\x00'], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffffb)
keyctl$get_security(0x11, r1, &(0x7f00000002c0)=""/237, 0xed)

11:46:21 executing program 4:

11:46:21 executing program 7:

11:46:21 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000))
close(r0)
close(r1)

11:46:21 executing program 7:

11:46:21 executing program 4:

11:46:21 executing program 2:

11:46:21 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x0, &(0x7f0000000000))
close(r0)
close(r1)

[  127.861499] binder: 8606:8610 unknown command 25387
[  127.875274] binder: 8606:8610 ioctl c0306201 200000c0 returned -22
[  127.908946] binder: BINDER_SET_CONTEXT_MGR already set
[  127.916200] binder: 8606:8628 ioctl 40046207 0 returned -16
[  127.923421] binder: 8606:8610 unknown command 25387
[  127.928446] binder: 8606:8610 ioctl c0306201 200000c0 returned -22
11:46:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x20, 0x1, @thr={&(0x7f0000000000), &(0x7f0000000080)="761cfb026965b6c6babadf20bfe411941efa3b109b6552610137ca24191097c1432f0db7"}}, &(0x7f0000000100)=<r1=>0x0)
timer_getoverrun(r1)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:22 executing program 2:

11:46:22 executing program 7:

11:46:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:22 executing program 4:

11:46:22 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x0, &(0x7f0000000000))
close(r0)
close(r1)

11:46:22 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/219)

11:46:22 executing program 4:

11:46:22 executing program 7:

11:46:22 executing program 2:

11:46:22 executing program 7:

11:46:22 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x0, &(0x7f0000000000))
close(r0)
close(r1)

11:46:22 executing program 4:

11:46:22 executing program 2:

11:46:22 executing program 7:

[  128.606007] binder: 8642:8645 ERROR: BC_REGISTER_LOOPER called without request
11:46:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)

11:46:22 executing program 2:

11:46:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='*\x00', 0x3)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080))
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x2, 0xc0)

11:46:22 executing program 4:

11:46:22 executing program 7:

11:46:22 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(0xffffffffffffffff)
close(r1)

11:46:22 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
fstat(r0, &(0x7f00000005c0))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2400, 0x0)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000002c0)=""/254)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b630000b85f001608ba0ef79a9d3a77fe137df65145e59813e557c1e0c4450e15c8d57fff2955a9900225c7a4c93e29d7ec6571d45fbb3cd9c86b4bcabc5e39cfd2224b7bd6d80dbe3cafda5f474bab6df77e7110d3fb0f76b047171c13e2a4d4b819e6c6547da2c94655f7e543790a7c73e7cb5a4facd0ce600ea2e317a9123490bb5b"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

11:46:22 executing program 2:

11:46:22 executing program 4:

11:46:22 executing program 7:

11:46:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x4000, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x4, 0x19, 0x1, 0xffffffffffffff46, 0x200, 0x3a3})

11:46:23 executing program 2:

11:46:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x21})

[  129.513134] binder: BINDER_SET_CONTEXT_MGR already set
[  129.521914] binder: 8642:8686 ioctl 40046207 0 returned -16
[  129.531957] binder: 8642:8671 ERROR: BC_REGISTER_LOOPER called without request
11:46:23 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  129.560315] binder: 8693:8697 ERROR: BC_REGISTER_LOOPER called without request
11:46:23 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:23 executing program 1:
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0x46b)
ustat(0x6, &(0x7f0000000280))
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x54, r2})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2002, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:23 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c)
sendto$inet6(r0, &(0x7f0000001140)="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", 0x5b5, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c)

11:46:23 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:23 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:23 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(0xffffffffffffffff)
close(r1)

11:46:23 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2000, 0x0)

[  130.351240] binder: BINDER_SET_CONTEXT_MGR already set
[  130.356581] binder: 8693:8722 ioctl 40046207 0 returned -16
[  130.371398] binder: 8693:8721 ERROR: BC_REGISTER_LOOPER called without request
11:46:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000")
fsetxattr(r1, &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0x3a7, 0x0)

11:46:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000))

11:46:23 executing program 1:
gettid()
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x100000000, 0x0, 0x5, "fe017f6805b1fac1d56a0f889e7522eff0af7720cd2062cdaf688103454d86f54db04f006935712a626574c50bc2bffcac6806eab14d919be002dee6beefa4f6af2177d5a0df369f165d930ca980a5c9"}, 0xd8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080))
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000200)='sessionid\x00')
fchdir(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
socket$key(0xf, 0x3, 0x2)

11:46:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000")
fsetxattr(r0, &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0x3a7, 0x0)

11:46:23 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d80)=@nat={'nat\x00', 0x19, 0x6, 0xcc8, [0x20000080, 0x0, 0x0, 0x20000470, 0x20000730], 0x0, &(0x7f0000000000), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x0, 0x12, 0x884e, '\x00', 'ip_vti0\x00', 'ipddp0\x00', 'ifb0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x170, 0x2a0, [@helper={'helper\x00', 0x28, {{0x1, 'irc-20000\x00'}}}, @mark_m={'mark_m\x00', 0x18, {{0x4, 0x5, 0x3, 0x1}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:udev_rules_t:s0\x00'}}}}, {{{0x5, 0x1, 0x0, 'gre0\x00', 'team0\x00', 'team_slave_1\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xb0, 0xe8, 0x120, [@time={'time\x00', 0x18, {{0x10001, 0x1, 0x12cec, 0xc44e, 0x7fffffff, 0xac26, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@random="157896c729a2", 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x4, 0xcb0d, 'ip6gre0\x00', 'ip6gre0\x00', '\x00', 'veth1_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0xff, 0xff], @random="6300e98e35d5", [0x0, 0xff, 0xff, 0xff, 0xff], 0x108, 0x178, 0x1a8, [@physdev={'physdev\x00', 0x70, {{'veth1_to_bridge\x00', {}, 'rose0\x00', {}, 0x10}}}]}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {{{0x3, 0x21, 0xe9ff, 'bridge_slave_0\x00', 'nr0\x00', 'veth0_to_bridge\x00', 'veth1_to_bridge\x00', @random="da12d3e63414", [0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xe8}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x100, 0x4, 0x0, 0x1, 0x0, "caa41b61c7817ee9c5b06dbcaebb55ea0f84f293a4a8a6597ebe467379162b374912f78a2cb6f831025da591c20cf059fd775d91411bd4b049f4f9632806d8bf"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0x15, 0x8, 0x0, 'ip_vti0\x00', 'rose0\x00', 'dummy0\x00', 'gre0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xb0, 0x218, 0x250, [@devgroup={'devgroup\x00', 0x18, {{0xd, 0x3f, 0x1, 0x100000000, 0x5}}}]}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffe}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2, 'system_u:object_r:ppp_device_t:s0\x00'}}}]}, @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}, {{{0xb, 0x28, 0x886c, 'veth0_to_team\x00', 'veth1_to_bridge\x00', 'veth0_to_team\x00', 'team0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0x0, 0x0, 0xfee99c381db3673a, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0x0, 0xff, 0xff], 0x2f8, 0x330, 0x368, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x81}}}, @bpf0={'bpf\x00', 0x210, {{0xb, [{0x4, 0x80, 0x1, 0x80000000}, {0x0, 0x1200000000, 0xf05, 0x6}, {0x5, 0xffffffffffff0001, 0x2}, {0x4, 0x800, 0x0, 0xff}, {0x0, 0x0, 0x8000, 0x7ff}, {0x40, 0x9, 0xf6f, 0x7}, {0x7f, 0x101, 0x2, 0xab3a}, {0xfffffffffffffff8, 0x1ff, 0x3e, 0x4}, {0x1ff, 0x1, 0x7}, {0x5, 0x8, 0x4, 0x81}, {0xffffffffffffffff, 0xc9, 0x9, 0x3f}, {0x2, 0x800, 0x3, 0x5}, {0x0, 0x6, 0x7f, 0x9}, {0xfffffffffffffffa, 0x1, 0xffff, 0x53a2}, {0x3, 0x4, 0x8001, 0x1000}, {0x0, 0xffffffffffffff7f, 0x6, 0x9}, {0x5, 0x7, 0x400, 0x1}, {0xffffffff80000001, 0x9, 0x7, 0x61e}, {0x12c72276, 0x5, 0xa549, 0x8000}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x7, 0xfffffffffffffff8, 0x3}, {0x8b, 0x2, 0x101, 0x6}, {0x1455e796, 0x4, 0xfffffffffffffff9, 0x98c}, {0x84, 0x401, 0x8, 0x5}, {0xa86d, 0x7, 0x0, 0x3}, {0x4, 0x5, 0x7, 0x20}, {0xcf, 0x9, 0x5732f7c6, 0x9}, {0x0, 0x10d4, 0x2, 0x7fff}, {0x975d, 0x8, 0x5a, 0x4}, {0x8000, 0x80000000, 0x1, 0x3f}, {0x20, 0x7f, 0x5ef71726, 0xb3ba}, {0x6, 0x7, 0xba5, 0x8}, {0xfffffffffffff967, 0x3ff, 0x0, 0x2f}, {0x8001, 0x3, 0x800, 0x88}, {0x6, 0x0, 0x10001, 0x4bb731bf}, {0xfff, 0x2a0, 0x4, 0x800}, {0x959, 0x1, 0x0, 0x7ff}, {0x2, 0xf884, 0x20}, {0x20, 0x2, 0x0, 0x1}, {0xff, 0x8001, 0x4, 0x4}, {0x3f, 0x6, 0x1, 0x10000}, {0x101, 0x3, 0xd02}, {0x4, 0x1ff, 0x6, 0x4}, {0xfffffffffffffffd, 0x6, 0x1000, 0x5}, {0x6, 0x8, 0x5, 0x5cc}, {0x1, 0xb9, 0x1, 0x400}, {0x1, 0x6, 0xffffffffffffff7f, 0x9}, {0x5, 0x8, 0x7, 0x10001}, {0x1, 0xfffffffffffffffc, 0x9, 0x8}, {0x6, 0x4, 0x5, 0x23}, {0x9, 0x8, 0xcee, 0x5}, {0x7, 0x6, 0x0, 0x3}, {0x7fff, 0x5, 0xfff, 0x40}, {0xffff, 0x2, 0xc75e3c6, 0xffff}, {0x9, 0x5, 0x0, 0x3}, {0x101, 0x7, 0x6, 0x3ff}, {0x3, 0x24000, 0x20000000000000, 0x2}, {0x8, 0x5, 0x3, 0x81}, {0x90ef, 0xe31e, 0x8, 0x9}, {0x9, 0xffffffffc79b82da, 0x81, 0x9}, {0x1, 0x1, 0x3, 0x40}, {0x5, 0x1, 0x2, 0x4ff}, {0x7ff, 0x9, 0x2, 0x80000000}, {0x1ff, 0x6, 0x9a98, 0x6d}], 0x81}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0xd40)

11:46:23 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  130.446906] binder: 8736:8741 ERROR: BC_REGISTER_LOOPER called without request
11:46:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000)
inotify_rm_watch(r1, r2)
fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)='\'\x00', 0x2, 0x3)

[  131.340873] binder: BINDER_SET_CONTEXT_MGR already set
[  131.346181] binder: 8736:8785 ioctl 40046207 0 returned -16
[  131.355189] binder: 8736:8781 ERROR: BC_REGISTER_LOOPER called without request
11:46:24 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:24 executing program 2:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)}, {&(0x7f0000000100)="229a954e05a5c26678e5eef692aba2436816f793264ca36652a98c4e035af44cb7dcf1196762582c0273d357872ffa6008dd1e25f547cb1c63f8a7702f379f8749316186cbb9fd4434dd681720eb9b0eea1517371c0543ae483cfa4d5f1107298dd21e02f7738d3b287f8b0c84e6a72a9ad08a14b157ae9261bc4454c3d8377ebeef3f70aad4945db782f1b091c9d771c3b0270e924833dc6ba7abacb666790a77e6f49cbcf2c161fb0f1c75fb096198612ad8d64b446a9f6931b8ac23f8fd9b8da5aecfe6595d27eef8712686012f764328a6c471ceeef325", 0xd9}], 0x2)

11:46:24 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept4$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x800)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0))

11:46:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
accept$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0)

11:46:24 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:24 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(0xffffffffffffffff)
close(r1)

11:46:24 executing program 4:
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)

11:46:24 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockname(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80)
accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x20000, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000900)={'raw\x00', 0xcf, "deee92aac99c6b88976c6b7f8d3acfd030181da27b1431579934e6878d0a042b9c95ea0018dbf44782c4f8bad45dacc77d37debab92d72058f7a4570dde6811bb6f712f16c33b06685ac4cffd2cce3674a8102b990235af169934ca862a015eebe25b02ee51152b52de361eb1b90c75ef325b4214a9fa0115c386775b2e6e0050bd205ef0c2379ef52d38c7c66c42b973c24bbaae8b75542aec7a9abed422cf8c4e7ffc16174a675375d0b2e53faea97250215930b78069d1dc49c8072dd2ad38e789b2d13a3d679901fe4fcc0a958"}, &(0x7f0000000240)=0xf3)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6, 0x4e21, 0x3, 0x4e23, 0x5, 0xa, 0x0, 0x80, 0x1, r2, r3}, {0x68e6, 0x5e9, 0x772, 0x1, 0x9, 0x7f, 0x80000000, 0x8}, {0x1000, 0xfff, 0x8, 0x599}, 0x9, 0x6e6bb3, 0x2, 0x1, 0x2, 0x1}, {{@in=@loopback=0x7f000001, 0x4d4, 0x6c}, 0xa, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3500, 0x3, 0x3, 0xa3, 0x7ff, 0x9e9b, 0x4}}, 0xe8)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)={0x284, {{0xa, 0x4e24, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}}, 0x1, 0x4, [{{0xa, 0x4e24, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}, {{0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, [], 0x1d}, 0x1}}, {{0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x401}}, {{0xa, 0x4e20, 0xc0e6, @mcast2={0xff, 0x2, [], 0x1}, 0x6ed}}]}, 0x290)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1315d7e904c71a2a66869dabd1f4d83da3e2d68aed53adb3ced8937b0dc28405bcd5be9ac5eeb4b390915112e547e98e15ba4edb3738ddb66c621454063a085fc19e4d3c84043a155f6410afd9a470c998f00edfa8a05b5e2dbde243780963e02e8eb45ebe80d15d404f02214dc3dddacc9c9a0693bb3f447825103251a189de848e7d0fe61e0d2b185d27f5d75f0d872f37e8bfc10000d4c4798096aa8b9d5d3aa4edbfe874b50540"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:24 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379732f6e65742f697076346f76732f63616368655f62797061737300c63584946beeff879b9d3903ddb1965886fada54b667898fd636598bf260164806b90346121834897308d68393cd367f2cf10a773326f54e8e080000000000000030ba169f28905b1fcb303478c996d88a313002868733c3adf5d83f36397dd0dafb9304923fd3f067dff91481c19d7cebb7c07e9b2534bb449d62b2b9bd05cf8923145d3f017c1cdfdc88cbcfeb2b93a3c19054a3376f2f", 0x2, 0x0)

11:46:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="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", 0x1ff)

11:46:24 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x7, 0x101001)
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000300))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000002c0)=0x1f, 0x4)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="a4a34a4f3d8ef8538b79b0f49253ecdf4f9e8bff631970", 0x17}, {&(0x7f0000000080)='u', 0x1}, {&(0x7f00000000c0)="45f2ee62ee4b663907e5dfa545b4d32e7e0886a09415a36d06c1214422f67314268be0a8ae0e92227c295ce6e4c0ff4dfef08bf321444d925ab5a514354d15c296f5644c902be26c64715cca76228290d86fd54e1e4e79724d44cf60dcc74b299dfaa3576f6f961fb48a52c89f9bf6ece3117222e0891e0fd9e2a96dde336529b6", 0x81}, {&(0x7f0000000180)="7afb6ce57cb9c1b12fb91510b83643", 0xf}], 0x4)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r2 = fcntl$getown(r0, 0x9)
fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x0, 0x2, 0x101, 0x8, r2})
syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x5, 0x800)

11:46:24 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x3)
fallocate(r1, 0x0, 0x0, 0x80003ff)

11:46:24 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:24 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004600)={'team0\x00'})

11:46:24 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000380))

11:46:24 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
open(&(0x7f00000001c0)='./file0\x00', 0x8001, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000020000000fb813ece000000", 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x1, 0x6, 0x6, 0x0, 0x9, 0xc82, 0xe8, 0x7, 0x1, 0x6})
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040))

[  131.488826] binder: 8818:8825 unknown command -371780333
[  131.509169] binder: 8818:8825 ioctl c0306201 200000c0 returned -22
[  131.534735] binder: BINDER_SET_CONTEXT_MGR already set
[  131.540104] binder: 8818:8843 ioctl 40046207 0 returned -16
[  131.547032] binder: 8818:8825 unknown command -371780333
[  131.552581] binder: 8818:8825 ioctl c0306201 200000c0 returned -22
11:46:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
pselect6(0x40, &(0x7f0000000040)={0x0, 0x54e, 0x8d, 0x7ff, 0x1ff, 0x50b7, 0x8, 0x10001}, &(0x7f0000000080)={0x100, 0x9, 0x7a8afd82, 0x6, 0x543, 0x57, 0x9, 0x100000000}, &(0x7f00000000c0)={0x7, 0x5, 0x56, 0x20, 0x1000, 0x7, 0x5a, 0x1ff}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={0x7fff}, 0x8})
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10)
fcntl$getownex(r0, 0x10, &(0x7f0000000200))

11:46:25 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x101883)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:25 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10)

11:46:25 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:25 executing program 2:
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrusage(0x0, &(0x7f0000000000))

11:46:25 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(0xffffffffffffffff)

11:46:25 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000100))
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:25 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
setpriority(0x2, r0, 0x0)

11:46:25 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff)

11:46:25 executing program 4:

11:46:25 executing program 4:

11:46:25 executing program 5:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040))
socketpair$inet(0x2, 0xa, 0xffffffff, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}})
prctl$getname(0x10, &(0x7f0000000080)=""/180)

11:46:25 executing program 4:

11:46:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)

[  132.431641] binder: 8865:8868 ERROR: BC_REGISTER_LOOPER called without request
11:46:25 executing program 4:

11:46:25 executing program 2:

[  132.485988] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET)
[  133.232513] binder: BINDER_SET_CONTEXT_MGR already set
[  133.237859] binder: 8865:8913 ioctl 40046207 0 returned -16
[  133.250262] binder: 8865:8910 ERROR: BC_REGISTER_LOOPER called without request
11:46:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:26 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]})
fchdir(r0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140))
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:26 executing program 4:

11:46:26 executing program 2:

11:46:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0x7, 0x100000001}, 'port1\x00', 0x40, 0x100004, 0xff, 0xfffffffffffffffc, 0xffffffff, 0x40, 0x8, 0x0, 0x5, 0x1000})

11:46:26 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(0xffffffffffffffff)

11:46:26 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'teql0\x00', 0x8})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400000, 0x0)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630080e235a669fee73fb428759311da1406b80d6fe4993d6ee1027a218dd182cbe39deaa975a1e1b59289"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:26 executing program 4:

11:46:26 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:26 executing program 5:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x1000, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)

11:46:26 executing program 4:

11:46:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3e1, 0x0)

[  133.462046] binder: 8924:8928 unknown command -2147458293
[  133.471408] binder: 8924:8928 ioctl c0306201 200000c0 returned -22
11:46:26 executing program 4:

11:46:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  133.507270] binder: BINDER_SET_CONTEXT_MGR already set
11:46:27 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:27 executing program 4:

11:46:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x5, 0x10000000)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountstats\x00')
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0))
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x7, 0x0, 0x8000}, 0x4)
faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x600)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0)

11:46:27 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040))

11:46:27 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x400000000000)
socket$key(0xf, 0x3, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

[  133.528420] binder: 8924:8945 ioctl 40046207 0 returned -16
[  133.601799] binder: 8974:8977 ioctl c0306201 200000c0 returned -14
[  133.609876] binder: BINDER_SET_CONTEXT_MGR already set
[  133.615241] binder: 8974:8982 ioctl c0306201 200000c0 returned -14
[  133.622162] binder: 8974:8977 ioctl 40046207 0 returned -16
11:46:27 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000))
close(r0)
close(0xffffffffffffffff)

11:46:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:27 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:27 executing program 4:

11:46:27 executing program 1:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='ns\x00')
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:27 executing program 5:
mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/123)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080))
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x4, 0x3)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:27 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:27 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)=<r1=>0x0)
timer_getoverrun(r1)
fsetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)='!&bdev\\\x00', 0x8, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x2)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000002c0)={0x87, {{0x2, 0x4e21, @rand_addr=0x8}}, 0x1, 0x8, [{{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e20, @loopback=0x7f000001}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e24}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}]}, 0x490)
ioctl$KDSETMODE(r2, 0x4b3a, 0x80)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:27 executing program 4:

11:46:27 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="010b", 0x1ff)

11:46:27 executing program 5:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001100))
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080))
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:27 executing program 4:

11:46:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:27 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:27 executing program 4:

11:46:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
clock_settime(0x5, &(0x7f0000000080)={r1, r2+10000000})

[  135.171609] binder: BINDER_SET_CONTEXT_MGR already set
[  135.176940] binder: 8997:9038 ioctl 40046207 0 returned -16
11:46:28 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000057c70db675dafa1a7151b1cd7bcbeadade0f0a883c717291664bb3516e71c5aff8f06710fea01930b3c96b45ae991d3d9e672567a87d41c9e16814113de64a8ee5404be74e01dc318769bd879fa422925e83c214fdc13b511027a3ab4856c484585bfb9c3ede289ffca66bd5dbbccf8f7f0f"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x4000, 0x0)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)

11:46:28 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:28 executing program 3:

11:46:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x0, 0xbd9a, 0x4, 0x446, 0x325})
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
r1 = creat(&(0x7f0000000200)='./file1\x00', 0x3f)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e)

11:46:28 executing program 4:

11:46:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:28 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:28 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
getsockname(r0, &(0x7f0000000140)=@ipx, &(0x7f0000000040)=0x80)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={<r1=>0x0, @remote, @local}, &(0x7f00000000c0)=0xc)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @multicast2=0xe0000002, @multicast2=0xe0000002}, 0xfffffffffffffda3)

11:46:28 executing program 4:

11:46:28 executing program 4:

11:46:28 executing program 3:

11:46:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:28 executing program 4:

11:46:28 executing program 3:

11:46:28 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)

[  135.264646] binder: 9041:9046 unknown command 1459617796
[  135.286642] binder: 9041:9046 ioctl c0306201 200000c0 returned -22
11:46:28 executing program 3:

11:46:28 executing program 4:

11:46:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:28 executing program 5:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/130, &(0x7f0000000140)=0x82)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:28 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x40, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:28 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:28 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:28 executing program 1:
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0))
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100))
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0)
write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x8917}, @val={0x0, 0xb25a644404ed9861, 0x5, 0x2000000000, 0xffffffffffffff7e, 0x7}, @ipv6={0x11, 0x6, "7a578d", 0x1f1, 0xff, 0x10000, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[@fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x64}, @hopopts={0x5e, 0x12, [], [@calipso={0x7, 0x10, {0x998a, 0x2, 0x7, 0xff, [0xce]}}, @calipso={0x7, 0x58, {0x7, 0x14, 0x40, 0x8000, [0xa4a, 0x413a, 0x100, 0x9, 0x40, 0x5, 0x3, 0x5, 0x74ebc89f, 0x4]}}, @enc_lim={0x4, 0x1, 0xf2cd}, @ra={0x5, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}, @ra={0x5, 0x2, 0x4}]}, @srh={0x87, 0x8, 0x4, 0x4, 0x4ab0, 0x50, 0x73, [@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}]}, @hopopts={0x3c, 0x2, [], [@enc_lim={0x4, 0x1, 0x25e}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}]}, @dstopts={0x0, 0x3, [], [@jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x38a3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3b, 0x2, 0x1, 0xa2, 0x0, [@loopback={0x0, 0x1}]}, @hopopts={0xff, 0x10, [], [@calipso={0x7, 0x50, {0x525, 0x12, 0x8, 0x4, [0x0, 0x6, 0x10001, 0xfb0, 0x1, 0x9, 0x7ff, 0x9, 0x3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0xff}, @jumbo={0xc2, 0x4, 0x7fff}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc8b, 0x0, [0x9, 0x3ff]}}, @pad1={0x0, 0x1}]}], @udp={0x4e20, 0x4e21, 0x11, 0x0, [@guehdr={0x2, 0xdfe, 0x6, 0xffff, 0x100, [0x80]}], "b3"}}}}, 0x227)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000240))
r1 = getpgrp(0x0)
getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640))
r2 = getpgid(r1)
r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x10000)
write$tun(r3, &(0x7f00000002c0)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2}, @random="74fb8af1ae05", [], {@llc={0x4, {@llc={0xaa, 0xff, "6d8c", "9276d6796203467bf85ccd7c60d03c4e3aa8a1a7b4542e8bf9a30cc85a8fd7f4f4b21138f6b6014e0cf227c326af4193b80db5f28c79af2193d483396fa04f85050a439bc3022bb9128e20f7581504b3d977ecbe5358"}}}}}}, 0x68)
r4 = syz_open_procfs(r2, &(0x7f0000000080)='ns\x00')
fchdir(r4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000040)=0x9, 0x4)
fchdir(r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

11:46:28 executing program 4:

11:46:28 executing program 3:

11:46:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

[  135.331701] binder: BINDER_SET_CONTEXT_MGR already set
[  135.345719] binder: 9041:9073 ioctl 40046207 0 returned -16
[  135.354557] binder: 9041:9046 unknown command 1459617796
[  135.354563] binder: 9041:9046 ioctl c0306201 200000c0 returned -22
11:46:28 executing program 3:

11:46:28 executing program 4:

11:46:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x851)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x208080, 0xa0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SG_IO(r0, 0x2285, &(0x7f0000002280)={0x53, 0xfffffffffffffffd, 0x1000, 0x9, @scatter={0x2, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/226, 0xe2}]}, &(0x7f0000001200)="f09951b3b09bc7d45f6c6dd128cd2594fbe26f061965ba4817c3db3af35b5d6c9a8168a0d55462d8fe325db4f684ff518777e4005fd86bcb1f329dcf8656fa098b81097c853b7a22f288aa13a038ddf3df866141dd48c68011cacb3a0e6cf85574a0f211942ef87303da5f1c79d44576db24844c32e75baef22705630da93344335b03b92c6a858f4e29094464a40478c9b91f13f38cc9ff5387ab86d4ed1fdf3f82e48f9afeb569ea26437e195850aea7953713ed4de568d4ed05cbabd12767cedd19b4604d26170ed0da43e52d0307a3ee6988dccc2869c1a0471b6fbff7365b683b08496ce2d7dfa636872e586d327d2c9f5c69eaf964d105339112fe98f1ec3ea0eb4f4c3555b2150f12a784771ee65a3a48379e78ae2f0ccbbe2a3a09dbfcca0841ac844a4ece4daed84eb47b69e1106ad62d48bac6414ade1cde9d717a4c0428360b489c49ace87e6a0c1182bd19e2a1c999077bbabad530501df5f8c56d42816dc564fff78c59d9c5852a531a8af5a3772a0d542d88682f30c451286b4c571f53ea4e8b2532ec6d8e37405545c1f7ff49f20d5e5f1be09d19c8ce038ce29ada9b2711bd8789a6bc529ba9d435369c3ec50342f952b694fea95b6e853b57ef0edf4b9926a366fa7200ef9b89654f19460a7caa1c30ea0806274b9f508816795f5a77f4b9b2dca8b04390deca44be5c884e74920e5f020903f11934dc98939e3dc9c323f3daa48daae31df42f1f64dd848d6e9467cb5c269071fc438b235323d5ee0b7ca3ba8e3477df008ff4b209ade4e9c63fb2ebe0d666511a29f4a3bebad7d3d6b4d36739475c233231e821192be4aa729e2c2db802f1994d9f3272566b95526560dbdb2627a6591d428af4a7dd499ad380ad17bb6793cd21e297ed9bf29678cc8ce55360e51d26b5c4a2b0e231587e2b551aaa58d0bcf4e53149e1c6ca7484846c3050e8c5f43e51a6c2e31243dcb7e3ee92cf5155e0cbbe93fe48d629aed2f4fcb6fd2c15b0787da0e56060db3b41c7a74718cb6c5d7faa22dfbdc152d37275013a6a59f34c6bcc4f181941358d53e741f40c3a872f8530b0bd0ac6a3eb234d29fbf98546871d4a6ae2842dcbb22a16a98bc7c8aa5856b4445cfdfd7d92e4da94ac769c3769759e004b2f12bdabb1ba34e6645ad650e79ff8c54f1a44b62d55a8169191175e94a9885c72cf5e1640becf18a56c6cd96f22cb23d560ba1733f6a7f4df43c815981ec4be19cc91b4ccf0dd0f0be7f2e5d194261e86bfb01ef51f1ece7b65693fe2819d4c78fe06c9c3c18752279d3f02fbc4263fefb40a6863c7c89ec693d63ac80668ef63c468940d8cff27ea26191511334a6b2f2694b1a21ce3e51f292a1b65f512ad893e79a1d8e0492a3e655c4675c9a60b32b87f2e269053cd7a0438fb94bf0068a1b5c09bc580d361564af70d153ad0dbfab41cd0b465a5c87eb2f6d9ca2e05e5f4a60569ef65477bb28d84efe28bcfa539733cabfdc33c4df2c23aab48f13eaaab1743880e8ff7c5967fa35eb414ee8861a9711823a674e7c20d0b1ae1c56a3c84aba3932ac06308199b950877c88621ef110d27da64b2a9bd33164ff66351ea88b3e44885c85d735106d33912dcaae7113ca17fbf4993979e3f5fd2e66088d92734a399e434d109af52cbba5a0b76400b33d5daa07794ee8c6ef962342dad48581b99b4da02f3f557c88470876838da46ce59bafa6e67da4d12cc733353be3e130d6f2f8522c9faa086bcf83d488c00497cd4f16d64c59c8b248383fc396c56ed6310fd5a7caafd264ac02de0c609e12e6c29451f32b0244a1c3e355ebcfcb3ee3d90d3b3a2f7751ad393c2985d2c4dbb1e54d75dec1c44a8c83dfc6c83712f0514af7e72a50a54185e20ba556bd1fc6bfeeab6fd10c9611f8acb0f2a042d08ca9636c400659a8021493c904a918374032797c6e054bc5d8e5f23b253e1aa0b4fbac3373e84ef7a71688c6d043bbf4fe70545c9231a74d410886f49d71227d9f9cfe8533af42ff8f274904671de25d8f46cead0ee8d4b639ac6b15f64e368e8106a4916986f903a5af8476885ff5182a81332ccaa82f6d3391fdd1d8e4b2652a7d78226aad77e73c240f79e075a7144fdc42b644fa3f1455f0ac69f79da9405fe504597b3f4b6ec3aca267f4722785b0bf8cb73c5221b7190fd84893349b66ca6960036d11f599b4a63315069a9272cd983ee33ef9788169e44eff8b7aa0bb68c34bf2db7a6165aa9050eb2c6138ea3e88543d50ec5738459515ab57955d373b12c99b036d17120ac1798e149fadf27bce667eb29a62e1833182206bf4f76771b0891872c27d06eea134f063e2287e47e8b66c1fb7bd1e13cac13d45f43e56b672b8e54581ae00b53b4e7245ec69a89836be70cf9aedbf105fe8f710bdc1baa8397001591529665fe2fcf2928eb0458f91d91247a4a194e6d71483dccd7ead9358c5bb89508f648d90c59f0f93833378e4956426f3e6f1cb22112ddfe8f339979a05d109920aca0982ac521abef1ba038d42ae50f48e2425a342d5bacf46ad176a4aca575b918723a156d0cf16c24fc3bff51fba539faa7ad17d665a427e73b3948b27355b991299d5b3d2d4044aa553261262c917d43a27e2d880bec32697c06f8839e52b9c399cf1a7e3b7b823701dfda71b9e2e7f5bc3ceb4df69d46aece654db91b8e211b48ecc6daba64ec9d319570e0ee73496c7937280fbc89b0518df92e0ad86606d0ea405c66683f313f516951e18c64227b00961fc311288bcf6520ba2fe871942ffc3a418fd9028f511ed11b5ee1694db024c422e2220bd2f65312bd55d0a96ac48ab6f9df4d788b26d2df7a567ed20add06d04955310221122c07779d91379f366291436884bc2467270664714c9de5844666498a2a0413d82b0a82eac255a0823d3ba19db25afd7713e5a97157286c8c52921832fc5718becbd3be26fbd223acbde7a5b5debf166ce5ff65ad021746fef13464fab707d54aa8a577f9d920486a7e6ca5acd02e658d7574d16c48c16d2b549654a4b28431efdd98e01142d93c823f1f6e3bb6a0c57287525480a9b21638ba8ddbbf92656fa22a66559d98958aa3157e46dbd6cf175339123d04199dd98b293b9a11dfbe12a4f07d0302185dd64228172e000c0c08b28c4b87a5598e9fac63155d474e2979076c2762a28b093abc9b371328214492b775df797e504b7a4c0137cacd3e905ef78efd6dcfae99b21630bbb76db3f89dab9698ef83974012903b6020b47460d7ceebbf0679029f344a83763572b215096bd2499ba7650d6eeef0ae84df698a45d7ac9f406106601eb4655eec082c348b4f4d152a01963a423f5fdffa83b36ef2afe5855d754623c3e7961cf985a6a62375837dcf5d0921038bc4b2990059c4993704192177e201dae065690460961ea82d2adde9dbb67cd4e43057f6d3dfde8700acd005c7d5624440d516ca0800d70fc5d48b8c812e16d92c22430751c8083893593296db56d361735a43bad58d62f51484caeebde4ff53927f1364259e53bbd718d905a2347aaae8982af018ab3ac7ab9cdc085115d475b3f3c347cfb1d2961fb0a3e951e4561b658c5d9d330d70d0af60dfdffa33d115b2ac4f7ec9963fc702cb50c7d7f52b700fcb7deffab703b2f6a0071ee7e3504f580ea559577d850b5c7e8f9e6c50d0d1f9a5e98dd257f5b117b627f5bf33113d2585afb41d0a4d47b857c4b2bb383570a4d1a2477e3fd8d61ab649f7a9132ba70a4ddfa7238ab97f4e7f056792b3a9a440c766504c5b563cac1cad8b789f4e8e2c737d9c00b8aedd7301e903e5aeda2891ccd60cd592f54b6c00117e07de1c61367439118110d522b86b4c8466a177805799c7efd77f2d96ae082b9ede9dc4feb509aee86d59bf52d3ad64dc3196218292b2ed4f1bc564c543296c5aaf554ab2647574e9827d1bdcf111f17aa1e79f788b31399f1d9fc925d032eda703efbee144a0276f7df11f14c02d63e2f7570a143dcadb508bd69ff2534d52f6216694d7d32528c43d23300a1e1e03a9aaf01d0cea9022cd7b9c103c803cf70eefb7cb1cd3306fb7cc63b5ec3f1524f6a458e6276ee03d1d6815a7f9dd50464749fc4bc5ac05f156bbdf16a6c1d9bcc3fa4947762a8183525939932452981badcd9f219894ee4c46b9d6a02ee94b5d0e91d9be03f48b5f85c83543fe2a892bea991ff01a8771c659c04385a530f25d87c42aa203f7526ebfb728334ba5353aa98e88a502450a32c8499c18649ac729a281e077a4631f0e0f7e8b02ed7db0974093ad6b05b3e9a9c02efa4d6472132e342f11998b887b3f7dea598ce1b07d9e73a8b7c0cc9ace388a6725d75c7f02c8c9fdd650323c885bfdfde0e734998b1c20c7f6aa9c93502f00efde91760a2c52f52a9b107c70fe15407078ebdca7fb2654bf7e65d0ffaed7f27f4d3230ed232549f246d230a830cda2c43c33654d1ff41e2a756d99d4be5f07b3a7dda9c42d181e3c756c5a902af4eb0ebe910d46c8f7a4a64a99a085d0dbdbd0de44efa3e23787fd9e711a3e7d7c1e9eaf87b8e410411c42a317e388a33f7d8f167cfb55ee3ce723ce9095eb2ab8449998199f5b7aea079bf0d1ac51d7f9914970a882cbab9dcd5c372ce5caac5a7f24a0d8c4804853a242d06ea417e0bb0ec72c6976ee66b37cef6dd6fdd189f67e532445ba65849136134c73cfffc28cc18ec07c454cfc0205152037186562be0f0a94bc8664aaa1a766c1d4063ceb71c856bc32bae1fe674db7e8793d4e80a04bc653a4d4a07687014a754e75f2e5e897be8c54dded9975c73b5ff7f002394df59148730263dacb2838b12817d1d0a04b94e451f492b001ec76348aab64af0eeadd539930f617243984d14c407fb9ef320f3ec8af2b4972a194c4568430a79e5677e11bc52b9af0263ec9ba444bad354982549cc7cd0807e67529ca85c4c6c0a892370f594b9c3686e36e943d9add817423b03fdb79183ee451e367fc2dd42a53cadc95fb1be6586b6c7ed0c0d416f21456c4cec110dd57e57b00d3632f776684430a2b93ff1a514d9ce0885e6e97e2b6c1d8c976adc20b5660b5506a226d8143e9c20b217a87a6908dba237d23982b07ac23f9574d8e4d2387de6637264afaef5459aaaf6b783efbfb23ee2c27f741ce4513b816e8cfaab713e300d7f03162d2f14b6d045a8c0c1e7ffc2b92bf3ac4b51b69a4f2052ca4c9ff89e364a02ccd9e2b7c18eb7faed1c8e321d11dfc93b0fec86fcaa35d490c4ed5954ebd3e95fa5faafa1a70ab519e3120fa945632089a1da4a91108e951e3e36d11f963751950f985b6b9e9e6c226325ce3c29e4323cd744f6fe0d48763ba73fb4fc924678ec98f32b5bd86a470bce42fea83eccc08affa320fcc38dd526e5609dd990e3d503590c3de7cb2d252fa998893e45c066ff4f59bbf0680823b01751c2d75738827dc7c4fda7725f097caa7473162a1421cffcbb49145d7cc185403c8b99fed297e174fa784e7799fa1308ff3f6827e18e258c11cbdcf98161ff52e68d220bfb51e7694f38ace1d9a7a05be0386b300997df2f1926d90ba015d91213eb71490f57d4ace4ad7ef099da7d30b8ad3901f4f11f4245a5d36fae9e7fc89b05c5e209e9cde76516c446a1ae44b57c4240b40a2262cb8ecfed708092019da9018eb969080fd2c6517ac74e3b47a1c959529cb331564e5ded7aa4c9ae7ae9d67e68f264d520dabc7e8a0d7ebab9d3f44478f49dd56c1d8cefb65e8d0161251a8866eb4936a5f27db4dd4f8d3ce79", &(0x7f0000002200)=""/31, 0x3, 0x2, 0x3, &(0x7f0000002240)})
fcntl$addseals(r1, 0x409, 0xc)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000002b80))

11:46:28 executing program 3:

11:46:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:28 executing program 4:

11:46:28 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x100, 0x2, 0x80000001}, 0x2, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x9, 0x0, 0x7f})
syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x80000)
fremovexattr(r0, &(0x7f0000000140)=@known='security.evm\x00')

11:46:28 executing program 3:

11:46:28 executing program 4:

[  135.414289] binder: 9090:9093 ERROR: BC_REGISTER_LOOPER called without request
11:46:28 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  136.196305] binder: BINDER_SET_CONTEXT_MGR already set
[  136.201660] binder: 9090:9139 ioctl 40046207 0 returned -16
[  136.210664] binder: 9090:9139 ERROR: BC_REGISTER_LOOPER called without request
11:46:29 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

11:46:29 executing program 4:

11:46:29 executing program 3:

11:46:29 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')

11:46:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x1)
r1 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="048f26377d50eb4c9f271b2380ef8514a7597492", 0x14, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000001c0)=0x6, 0x4)

11:46:29 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:29 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:29 executing program 4:

11:46:29 executing program 3:

11:46:29 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:29 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:29 executing program 3:

11:46:29 executing program 4:

11:46:29 executing program 3:

11:46:29 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="e6f89c8ac49fc3478b16cecf0a3669ffaa6b6a9c77fba03c1813312583394668845d12b04d792ffd2d916502858565fdea973f95325333e9379aeb17379661e1a8181afbb8fa76", 0x1ff)

11:46:29 executing program 4:

[  136.351647] binder: 9144:9147 ERROR: BC_REGISTER_LOOPER called without request
[  137.148116] binder: BINDER_SET_CONTEXT_MGR already set
[  137.153483] binder: 9144:9182 ioctl 40046207 0 returned -16
[  137.263447] binder: BINDER_SET_CONTEXT_MGR already set
[  137.268756] binder: 9144:9184 ioctl 40046207 0 returned -16
[  137.277785] binder: BINDER_SET_CONTEXT_MGR already set
[  137.277793] binder: 9144:9182 ERROR: BC_REGISTER_LOOPER called without request
[  137.290448] binder: 9144:9184 ioctl 40046207 0 returned -16
11:46:30 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x20011, r0, 0xfffffffffffffffa)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f563000002e7edd9fe2da1fceb0332bb4ddaf44fa046088116cd2ee3e8c8c1de65cd5ccf2fdf08eda1f5748c94a5ecd2abb7937946eb3f955399552c1c944f27018b0a622fd4a730fab18623688824dc2e72cd00c3f3630d6c574dca132a03ed4e6214f2a6792b20ddfae8bfe25d6cfb1718b0b080255e83764d7ac00a46e8601e49c92734d85380845581ae144e849acfad256f0396701e336d365f589dafb069938d08f974fa9d34772f5cf77d9f8a1df9396f0cd893ab14793cf63929be593d"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = getpid()
syz_open_procfs(r1, &(0x7f0000000000)='net/fib_triestat\x00')

11:46:30 executing program 3:

11:46:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:30 executing program 4:

11:46:30 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:30 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140)=0x4)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/146)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/204)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:30 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:30 executing program 3:

11:46:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)

11:46:30 executing program 4:

11:46:30 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=<r5=>0x0)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = request_key(&(0x7f0000000600)='syzkaller\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='}\x00', 0x0)
keyctl$restrict_keyring(0x1d, r7, 0x0, &(0x7f00000006c0)='ns\x00')
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000400)={0x1f8, 0x0, 0x7, [{{0x2, 0x3, 0x1ee, 0x0, 0x2b, 0x40, {0x5, 0x8, 0x3, 0x8000, 0x3, 0x10000, 0x2, 0x7, 0x80000001, 0x5, 0x9, r1, r2, 0xe5ef, 0x47}}, {0x6, 0x101, 0x5, 0x3, '*ppp0'}}, {{0x4, 0x3, 0x1f, 0x6, 0x6, 0x1, {0x6, 0xfffffffffffffffe, 0x8, 0xff, 0x87e, 0x1, 0x6, 0x0, 0x7fffffff, 0x6bf, 0x755, r3, r4, 0x9, 0x6}}, {0x5, 0x100000001, 0xf, 0x7, ']&.selinux*eth0'}}, {{0x1, 0x0, 0x4, 0x5, 0x4, 0x40, {0x1, 0x2, 0x0, 0x1, 0x400000000, 0x8, 0x119e, 0x40, 0x4, 0x100, 0x7fff, r5, r6, 0x5, 0x671}}, {0x4, 0x8616, 0x5, 0x8, 'wlan0'}}]}, 0x1f8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000700)=0x1, 0x4)

11:46:30 executing program 4:

11:46:30 executing program 3:

11:46:30 executing program 4:

11:46:30 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup(r1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, &(0x7f00000007c0), 0xfd06, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4)
ftruncate(r3, 0x80080)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x200800100000002)

[  137.459404] binder: 9202:9210 unknown command 25589
[  137.474175] binder: 9202:9210 ioctl c0306201 200000c0 returned -22
[  137.490006] binder: BINDER_SET_CONTEXT_MGR already set
[  137.497535] binder: 9202:9227 ioctl 40046207 0 returned -16
11:46:30 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
ioctl$TUNSETOWNER(r1, 0x400454cc, r2)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b6300c31512dbfbe1be065f0000000000"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:30 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
getrandom(&(0x7f0000000000)=""/76, 0xa5ca6791cebcd71a, 0xfffffffffffffffd)

11:46:30 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x400080, 0x0)
write$selinux_access(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a65743a733020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302eae1ebb0a332030303030303030303030303030000030303030380000000000000000000000"], 0x5f)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
syz_open_pts(r0, 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}})
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000004c0))
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f0000000240)=""/189, 0xbd}], 0x2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
fadvise64(r3, 0x0, 0x4, 0x1)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0xa003)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000200)=0x29)
socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000001c0))

11:46:30 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
ftruncate(0xffffffffffffffff, 0x7fff)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:30 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:30 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getuid()
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r2, 0x0)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f00007a1ff6)='net/unix\x00')
sendfile(r1, r3, &(0x7f0000000000), 0x800000bf)

11:46:30 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x50f6, 0x3, 0x9, 0x6, 0xffff, 0x40, 0x1f})
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  137.505973] binder: 9202:9210 unknown command 25589
[  137.511090] binder: 9202:9210 ioctl c0306201 200000c0 returned -22
[  137.541382] binder: 9240:9245 ioctl 400454cc 0 returned -22
[  137.549717] binder: 9240:9245 unknown command -1023384821
[  137.557385] binder: 9240:9245 ioctl c0306201 200000c0 returned -22
[  137.566698] binder: BINDER_SET_CONTEXT_MGR already set
[  137.572148] binder: 9240:9252 ioctl 40046207 0 returned -16
[  137.580110] binder: 9240:9245 ioctl 400454cc 0 returned -22
11:46:31 executing program 1:
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x8200)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x57c6b4ea, 0x1, 0x1, r1})

11:46:31 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:31 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)

11:46:31 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getuid()
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r2, 0x0)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f00007a1ff6)='net/unix\x00')
sendfile(r1, r3, &(0x7f0000000000), 0x800000bf)

11:46:31 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630000"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:31 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:31 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x2c, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0xeaa8, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0))

11:46:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
signalfd(r0, &(0x7f0000000040)={0xfffffffffffffff7}, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x0)

[  138.339524] binder: 9264:9268 unknown command 25349
11:46:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00001de000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/4096)

[  138.365421] binder: 9264:9268 ioctl c0306201 200000c0 returned -22
[  138.382450] binder: BINDER_SET_CONTEXT_MGR already set
[  138.387811] binder: 9264:9289 ioctl 40046207 0 returned -16
11:46:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:31 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:31 executing program 1:
fchdir(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)

11:46:31 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:31 executing program 6:
geteuid()
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:31 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:31 executing program 4:
prctl$getreaper(0x25, &(0x7f0000000180))

11:46:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:32 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f00000001c0)=ANY=[])
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000540)=@random={'btrfs.', 'cpuset\x00'})

11:46:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

[  138.555208] binder: 9304:9308 ERROR: BC_REGISTER_LOOPER called without request
11:46:32 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x10000, 0x3})
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/62, 0x3e, 0x100, 0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)

11:46:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
fchdir(r0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setfsuid(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)

11:46:32 executing program 4:
mmap(&(0x7f0000d7d000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0)

11:46:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:32 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
socket$inet6(0xa, 0xb, 0x10000)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:32 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f00000001c0)=ANY=[])
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='{selfvboxnet0cpuset\x00', 0x14, 0x0)

11:46:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
accept$packet(r0, &(0x7f00000000c0)={0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x6, 0x0, 0x8, 0x400, 0x1, 0x2, r1})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0x3a, [], 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000003c0)=""/58}, &(0x7f0000000480)=0x78)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x83, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000280)=""/131}, &(0x7f0000000340)=0x78)

[  139.354880] binder_alloc: binder_alloc_mmap_handler: 9304 20001000-20004000 already mapped failed -16
[  139.369055] binder: BINDER_SET_CONTEXT_MGR already set
[  139.370696] binder: 9304:9367 ERROR: BC_REGISTER_LOOPER called without request
[  139.381953] binder: 9304:9365 ioctl 40046207 0 returned -16
11:46:32 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:32 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xc01, 0x0)
getpgid(0xffffffffffffffff)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001240)=<r1=>0x0)
r2 = getpgrp(r1)
sched_getattr(r2, &(0x7f00000001c0), 0x30, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e)
process_vm_writev(r2, &(0x7f0000001a40)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/216, 0xd8}, {&(0x7f0000001440)=""/239, 0xef}, {&(0x7f0000001540)=""/235, 0xeb}, {&(0x7f0000001640)=""/116, 0x74}, {&(0x7f00000016c0)=""/225, 0xe1}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f00000018c0)=""/125, 0x7d}, {&(0x7f0000001940)=""/195, 0xc3}], 0xa, &(0x7f0000002d40)=[{&(0x7f0000001b00)=""/59, 0x3b}, {&(0x7f0000001b40)=""/177, 0xb1}, {&(0x7f0000001c00)=""/251, 0xfb}, {&(0x7f0000001d00)=""/42, 0x2a}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x5, 0x0)
epoll_wait(r0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x20)
r3 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000200))
r4 = gettid()
fcntl$lock(r0, 0x0, &(0x7f0000000180)={0x1, 0x3, 0x8, 0x7, r4})
fgetxattr(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)=""/4096, 0x1000)
tgkill(r2, r2, 0x41)

11:46:32 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
socket$l2tp(0x18, 0x1, 0x1)

11:46:32 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000005c0)={@dev={0xfe, 0x80}}, 0x14)

11:46:32 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  139.484226] binder: 9371:9373 ERROR: BC_REGISTER_LOOPER called without request
11:46:33 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:33 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:33 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:33 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x2b)

11:46:33 executing program 1:
gettid()
getpgrp(0xffffffffffffffff)
getpgrp(0x0)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000080)='ns\x00')
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:33 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:33 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:33 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x20040, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0))
r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20)
nanosleep(&(0x7f0000000940)={0x77359400}, &(0x7f0000000980))
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@mcast1, <r2=>0x0}, &(0x7f0000000140)=0x14)
sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000180)=@hci={0x1f, r2, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="ea05fbae92ac68f06e40a98f27f8e04bf1c16f979f39399584b44559331180b856ecf1accca02aa7d30c97f0337abfbaae2fd112b6f39f2af1e57b577867202d52a09c1ec07778e856023354ac17da256eaafdd3f66a4083826e7d835d2265b37a4ec195af06e91366cd07cd208521795d930a02ac29c88f7bb5ce158dc2c5d80c192cdca6a91ae60f8a3e7cd68fed4fa2d1c8671fecf3d6cbc32f5654b6d3fa9cdf39b95fad47d0f0e49c5a5467fe2383db24983a46cce784b5fe75a429bcb14fb9a1c5ef", 0xc5}, {&(0x7f0000000300)="3f8aeea61e60730bb081a451ca36ca4dbd23eab2733f910ba8d43fcc973fcdb95af40531742d654fb4242fbbff3213f3821d1069eccd65718af8cc939bfcad", 0x3f}, {&(0x7f0000000340)="2c99253b4e075d8a171f3007024a5500ea7e5629ec15f5ff7c362e26a48b4dd149fb0c42c8ca8fe1e85569da72cab7428025c27f28961b276adb46acce6e7d6d9900e2ad28d6870a571bc2d43af5b344cfb7c432e7b41aed28b0100a33f09d34ca7876301184c161c84428defd04799d8f0fd9491c3887db268abe310816e083771d6ae30179619d9f0aba148fb63857b3f896f41f6d3e9df342478b51761f1065faa6090d848e60e91ccbdb2d6a8f69b85961221ef55f3a1235fb1f6565", 0xbe}, {&(0x7f0000000400)="58e36b47749b1a2709239cd33bde10f2b9d315fbcb04ebc1d89317bf79f9b68bc8047fbb34246acd1ee10d560f92c5450a4cc5bd3daed52e9e57960edc779731dd2132ffec7e0864a088500a0fb0b45088044bab1d698b94fd5aca8b679fda49d1b8fc8e62a4f10f9b0fb40ca185bfdc51e1cd11a02aac045a02395a7fb73c493c06b52740fc", 0x86}, {&(0x7f00000004c0)="26ff73acdba1970c00fec3", 0xb}, {&(0x7f0000000500)="ec9b711053ca5581a2e521847846eb2ac7000caf9848b0446c8621e910d1a941923d174db9f1f47e28ac4daa27000dc3dcf3350af79c7524a741d168f374e2", 0x3f}, {&(0x7f0000000540)="a6b43d3b287b8b079f8e5ae64d430cf993ad48f1163df591f9a27ee37d042b7338", 0x21}, {&(0x7f0000000580)="aab27be1167ef537c02782a7406fbdcd1d38a7482ef5003b27f9f90a3973264036ff437c56c5207df750eb8ab9548e92a1fa37ab6cd0814ff85ad471071f06ac589a6d045762b62aa7a71a243cd1590ac2f0d054a85f1be6dc97d628a92f571e414e40fe4ff03f3f2e23ac1f281a0c394e250056b55cfe34832b3b1f6d4dc64e68a7f3da5be0b4e28256fb77efded03415016b6d73395a5aa5f3828cb186f4d8ba9b6f59cf60c3a5253a11109d77b2", 0xaf}, {&(0x7f0000000640)="5acc9fd6a3d0a0daa1330120c67c42debeed3c923dcf1df5529a74d173256db79463bf366a2d726ca628a4de045d1150a46be3a115dad14aa19db8d22bfecfff", 0x40}], 0x9, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1b0, 0x40000c0}, 0x4000000)

11:46:33 executing program 1:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000080)='environ\x00')
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xff, 0x4)
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:33 executing program 6:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10002, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)

11:46:33 executing program 1:
fchdir(0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x145800, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8)
bind$packet(r0, &(0x7f0000000b00)={0x11, 0x1f, r1, 0x1, 0x161, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}}, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:33 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:33 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:33 executing program 4:
clock_getres(0x6, &(0x7f0000000000))

11:46:33 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
write$FUSE_LK(r0, &(0x7f0000000080)={0x28}, 0x28)

[  140.282775] binder: BINDER_SET_CONTEXT_MGR already set
[  140.288138] binder: 9371:9425 ioctl 40046207 0 returned -16
[  140.299574] binder: 9371:9424 ERROR: BC_REGISTER_LOOPER called without request
11:46:34 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff3", 0x41, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040))
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:34 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(0xffffffffffffffff, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:34 executing program 4:

11:46:34 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\vc\x00@'], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:34 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:34 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:34 executing program 4:

11:46:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
socketpair$inet(0x2, 0x8080b, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @multicast2}, &(0x7f00000000c0)=0xc)

11:46:34 executing program 4:

11:46:34 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b630000abde79bbf32795884500a6b4c0c9627bd0e213f81be97b86c7371a6431d8f227d1fecbfd888ea23db2d7a1a1f92e55b14d856e26ca3b86af9ec0673e7e15825f049d557dd51a92d6ef0362b8a0d54172924d13dc1a7aa4548259b62c2c3f1d09cbb67d8c6ebf4108b1f966f340eb7188f207da1afb0db914c6a3bab511c9332365a2243c78cb33b03631ceab8e01935c1db4ffeaaa43ad59c75749377ef4946cd3afd993468702e8d8502fb0dc119f09784ddee013c4e426ef3858fece3c3c5c32e5d09b0ece2e967463fccdeed2d4bddb5fc1ffc33f555b69852e342ace8b9a00000000000000000000"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:34 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)

11:46:34 executing program 4:

11:46:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
prctl$setmm(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil)

11:46:34 executing program 4:

[  141.135655] binder: 9476:9480 ERROR: BC_REGISTER_LOOPER called without request
11:46:35 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff3", 0x41, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:35 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000180))
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1})
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0)
write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7)

11:46:35 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:35 executing program 4:

11:46:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:35 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:35 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000140)=0x54)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

[  141.939330] binder: BINDER_SET_CONTEXT_MGR already set
[  141.944720] binder: 9476:9501 ioctl 40046207 0 returned -16
[  141.953753] binder: 9476:9500 ERROR: BC_REGISTER_LOOPER called without request
11:46:35 executing program 4:

11:46:35 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8)
getgroups(0x2, &(0x7f0000000200)=[<r2=>0xee01, 0xffffffffffffffff])
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0xa0008, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions', 0x2c}, {@allow_other='allow_other', 0x2c}, {@blksize={'blksize', 0x3d, 0x400}, 0x2c}]}})

11:46:35 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  142.015762] binder: 9510:9515 ERROR: BC_REGISTER_LOOPER called without request
[  142.042428] binder: BINDER_SET_CONTEXT_MGR already set
11:46:35 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  142.064807] binder: 9526:9530 ioctl 40046207 0 returned -16
[  142.082604] binder: 9526:9530 ERROR: BC_REGISTER_LOOPER called without request
[  142.814673] binder: BINDER_SET_CONTEXT_MGR already set
[  142.822024] binder: 9510:9553 ioctl 40046207 0 returned -16
[  142.831036] binder: 9510:9552 ERROR: BC_REGISTER_LOOPER called without request
11:46:36 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff3", 0x41, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x100, 0xffffffffffd)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:36 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:36 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:36 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)

11:46:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:36 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c)
shutdown(r1, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x101000, 0x0)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
r2 = getpgid(0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$binfmt_aout(r1, &(0x7f00000016c0)={{0x108, 0x5, 0x3, 0x11c, 0x3d6, 0x8001, 0x130, 0x312}, "c7bd53203656ec85fd1972974190b26a1b8254d4f0e537d5b42d604d5bdc", [[], [], [], []]}, 0x43e)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_generic(r1, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000000300)={0x1320, 0x24, 0x808, 0x70bd25, 0x25dfdbff, {0x19}, [@generic="4b34fd621219ec62bc89beeb8d435dc25362975269fa73b25c60", @generic="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", @typed={0x10, 0x75, @str='/dev/sg#\x00'}, @nested={0xf8, 0x66, [@generic="7e4bcf12d581fd3ae5854824723651f6d64e6a7f48fb77bff56263cb71a84f3274cae2", @typed={0x14, 0x68, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x21}}}, @typed={0x8, 0x2f, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @generic="c62252f48390036767c35d34f3ae423bddce40481be4718e628bc34ac178986b5aa64d5edba98f21fedc3efd84a070528035c37077cac561575ce51deb3431d45a1f1c73ab4acd1f8aa232a25640e7cce40719742471a356dbc8f11d185f7bfeab907bf5dd1bfc00a227cf89876bcd49393a713a7a382338b19410f605a78811ac0636", @generic="e0369938d2ee13a95de8a3026ef9ce19afeaac02478e38eace", @typed={0x8, 0x11, @fd=r0}, @typed={0x8, 0x71, @fd=r0}, @typed={0x8, 0x6, @fd=r1}]}, @nested={0x1e8, 0x8a, [@typed={0x8, 0x8f, @ipv4=@multicast1=0xe0000001}, @typed={0x8, 0x74, @uid=r3}, @generic="05187456b0c78d07cebca77ca341e2cb438dffb0b6036ce58a8a90deb3d3cc2e37d8525e35acfbad0f18a065328e47f7496e432144e9da08e9bd96141a4e58225a481a94eb4160d924f0053b84f93d4e2c50351d542f78ee93c0db6c9bd1649afaf0d4b49c67bd783cf2b0014a372a38784bf76ee1bd9628a57b768685dbb06945215115e41c14852393264854c0e1ad7c83f67cb9e9309bd44b9f5d13b4d3e53d61b9358df5b20065a38c8108353cc187a304d46662b9303bd0d533dd1ed3462bafde761417f07f5acb104b22c7cb147700785c23670b6e8b00e1796841865762c65e212be5563aa26495", @typed={0x8, 0x37, @fd=r1}, @typed={0x4, 0x8f}, @generic="f7cfbcee6d621d2466640ea589ae3c1c99e4426d10fdff86fc58c22ca9d99253fb8f64d659a3b434d10614bd2176d16cfdf2835d8220ae2d0606edabd10f93ec390c7db39f878f70d697a2ca491dd067aaeeedb0fd408c8afcb1dbdbd9c303b59f18ea2015293c86b3e7611c43c9372c6a24e0ff50e4f5f87a", @typed={0x8, 0x46, @uid=r4}, @generic="342db24767f383ae91f33130bc4848e6a73f5d7e2ce1d8c3d18b08d62fd7481c08a58ebd78f8d705100b03c1f24b3d99d2", @generic="d3543013f122829b99d38d95144db172b2d75b8b441f1f11d77f10c9970468fdcc6644c68dd3da368379"]}]}, 0x1320}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ptrace$poke(0x5, r2, &(0x7f0000001b00), 0x3)
ptrace$cont(0x1f, r2, 0x7fffffff0, 0x101)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x16c0)

11:46:36 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00')
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r1)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200400, 0x0)
fchmod(r1, 0x78)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
getgid()
r1 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x2)
accept$packet(r1, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
connect$packet(r1, &(0x7f0000000100)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14)

11:46:36 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:36 executing program 1:
kexec_load(0x4, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000040)="8bf76c0334e6d9ca9c3d6311ca684e097d6d58481adac098cbe032d344dfc14f2f235258f6bf3a1bbb25de2eecc2245b20b52b14171783585d8b5fe53bd2dff12834a5d466af3a4faf909a5dc6852380b6b7ee21398252ef31dcd01a32787e941df92458db2381165c35027e1aea999b479167fda45600d3c25a46bbe8c9cde7e9e4b4d80b1b5fd27de5e4e08f987a8b758c07e8826a486ab3055a0012ebf559776741f87390f733f6e4ec", 0xab, 0xfffffffffffffffe, 0xffffffffffff0000}, {&(0x7f0000000100)="2b54d99e8f87c4990aaf3f168c67712fe9c9f900599852033b4047471a7af825e7ac94ddd21253c226f59ee04ec4a11cdf82f5dca109774b623a7d9c5013ba2906dc5a9d05c2d0efc181bc232bfc122f5a4732715c694eb3265ee31f5a839caf084e82da85c6c9866b48109b7ee586f7e593954b61d1b31de9795cf9afa7804b22b390ccb17176056b2235c02a3fdf103d6883486ff83afc87a69e1dd8243bfefe3fbeb00a78ae91324f56c0adb629", 0xaf, 0x1, 0xfffffffffffffb0c}, {&(0x7f00000001c0)="af4796832dd30b6972c93fd9f90a3846826c019dfdb6c4ce66a94a4543ca16d7a5368d748e7daac907241999b560f5e0fb5a2f5f50f6a6c152178a24c033fa165d3e8e61aaf90593563dd6dd7046332c96feec21d9af054f00bf305fc7c0c7c57f2102836a54c78701d7b0f7ee5cb393d2b8acf652", 0x75, 0x7, 0x5}, {&(0x7f0000000280)="9753e6cca30132dae39a6e81d6e76ec7af5a43077907b55c40975f98ebb03defa05f8b0a9a6ff49a6b5fd99837aeeb8d957371f176028cb3b97a11d707e765cb3886e8a1ce1d2f2beda5534148680f00ee8fcd9c733c453b5dd2c2fbe3687b08c324cc47dda692404f1b8431688bda85f7a2c178620f0926ff14f51cea7b6a308146810ab88c048806b605193fcd25c4bd916a6d74b21a952fc5927f6aed1122bb9fdff761833989a3bf8edef01aa979512755c628d15502cd49bddb07baefe348cf2c36ff7a826e25566f", 0xcb, 0x6}, {&(0x7f0000000380)="e39e2e9dce3eda149d3400585833ddc279d236e9a3e438d3dc2798fc07e764faed42127664b7df71c7fcfe85be07f664632b992d2d58d7e87ac3cb49cbb801d432151db2580fdfc86b65ba096f5c53a645e405316a482bc7c957118e75d494704d32bd6314d97ff506078e98599e0be05ec50d3c37cda5c7b390d9a3c723c3fad03564f1b57cc5055f13a9b8d479ceda4bfe2dc1837d9f8ba605d553268e1018efaa9eceab904caa35089352c9c7e4ea8eedc89a6064fa16e916073e679d4ed7665abad4ee", 0xc5, 0x7, 0x1a}, {&(0x7f0000000480)="07a5cafda29fae3b619aaf1d60e4cba881ddbc15848e37829e8d255305e6825f7a7bdaf02b5e7b9d997255e5f7a8bfe9441b43e440b4001106c3c33da063eb2e55686d77c748125b1fa002f655eaa190df7c802ee6af4faa825d267195640ec3f4662c101a18d451c2572de50ffd9d26b6422451ed8cd1ffd80159ab76b107678852f38fc85613f50163a72b480c58f545a335913109f38d49791412df285bf74e0a6e5a03353389d8bf3a8eab17411f148b251aacb7715f0676a646c8559edd6ba4e6c79ceb8cb5ba57b0", 0xcb, 0x3f, 0x10000}, {&(0x7f0000000580)="90dfee9682", 0x5, 0x8000, 0x9}, {&(0x7f00000005c0)="85c8cb5498a408ffa0a148c9c64f6ffea80c85cd7ac50cadfb1c57a19cb56438da50c96640dc9ec9a1ad651da7715f2de18dc4f3251ac3050f25a05f132e255f0587630e0c82737097c56b958efce31b7c0e71fb30c6a04a3582b16678bea2703038f0bbf91bf4e8e7d764d96bcefbff9863798e7345506d5a70", 0x7a, 0xffffffff00000001, 0x8000}, {&(0x7f0000000640)="34cb0afb1d20ef8d2d60916cc27c2653d3ce89e34d2c9174e98b3b95a6952621326addf347f559bcdb090b852b2b2e4619c905e51b254680fb76d9159e0ac56e2539", 0x42, 0x0, 0x1}], 0x2a0002)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:36 executing program 5:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x101000)
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

[  142.940708] binder: 9564:9570 ERROR: BC_REGISTER_LOOPER called without request
[  142.945036] binder: BINDER_SET_CONTEXT_MGR already set
[  142.945042] binder: 9566:9571 ioctl 40046207 0 returned -16
[  142.945130] binder: 9566:9571 ERROR: BC_REGISTER_LOOPER called without request
11:46:36 executing program 5:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040))
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2080, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/28)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x7)

[  143.747220] binder: 9566:9612 ERROR: BC_REGISTER_LOOPER called without request
11:46:37 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fa", 0x62, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:37 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:37 executing program 1:
r0 = getpgrp(0xffffffffffffffff)
gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00')
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000240)={'bpq0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}})
futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}})
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x890)
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x100)
dup2(r1, r1)
openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x8000, 0x0)
unlinkat(r1, &(0x7f0000000440)='./file0\x00', 0x200)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bpq0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="380000000000a4000000000800000000000000faff000000"]})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

11:46:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x88081, 0x0)

11:46:37 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:37 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc0200, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)

11:46:37 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)

11:46:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000000)='lo\x00', 0x2)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

11:46:37 executing program 2:
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:37 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8, 0x80800)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r1)
ioctl$void(r1, 0x5451)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:37 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100))
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x103000, 0x0)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x1, 0xff, 0x9})
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x5, 0x2000)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000001c0))
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)

11:46:37 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x402c00, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x70, 0xfffffffffffffff9, 0x4, 'queue1\x00', 0x100000000})
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r1)
arch_prctl(0x1001, &(0x7f0000000040)="e8f96e6ffefee6af14e14c1cbef37d08e456d5451042e95fb71e4c548fb6818508a254517858ed99d3102da12ba920572750056b63bb61827fce1cd469f758dfa963dfe67e5ec45a5d42da25f1c425a3e4ecfe1e589d2b5a7d696c15a0d563a3eb3059f62942ddfa016978fd878586386b9af473ee6b6a8cbe292bee6968bb57851781ba3d6acbca274fbcd6bdcf3d188cabd2a36ed32f72b05002ebddd53c93cc22")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)

[  143.865539] binder: 9624:9629 ERROR: BC_REGISTER_LOOPER called without request
[  143.876333] binder: BINDER_SET_CONTEXT_MGR already set
[  143.882871] binder: 9626:9632 ioctl 40046207 0 returned -16
[  143.894696] binder: 9626:9632 ERROR: BC_REGISTER_LOOPER called without request
11:46:38 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fa", 0x62, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='/\x00'], &(0x7f00000001c0)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)="070000007202000400000000000000fb813ece00", &(0x7f0000000180)='bdev}\x00'])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:38 executing program 5:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7)
socketpair$inet(0x2, 0xe, 0x20, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x7, 0x4)
r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x40000002, 0x100fff)
syz_mount_image$msdos(&(0x7f0000000780)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="eb3c906d8966732e666174000204010a0209007400f8", 0x16}], 0x0, &(0x7f0000000180))
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000040))

11:46:38 executing program 2:
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:38 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

[  144.777051] binder: 9626:9680 ERROR: BC_REGISTER_LOOPER called without request
[  144.790409] FAT-fs (loop5): bogus number of directory entries (9)
[  144.792488] binder: BINDER_SET_CONTEXT_MGR already set
[  144.792493] binder: 9681:9689 ioctl 40046207 0 returned -16
[  144.821876] FAT-fs (loop5): Can't find a valid FAT filesystem
11:46:38 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x509000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0xb5edb2e574f4e1a4)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
r2 = mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x1, 0x6c000000, &(0x7f0000000280)='H'})

11:46:38 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)

11:46:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
socket$inet_udp(0x2, 0x2, 0x0)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="07000000720200460000000000000000000000000000", 0x1ff)

11:46:38 executing program 2:
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:38 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  144.872044] FAT-fs (loop5): bogus number of directory entries (9)
[  144.878286] FAT-fs (loop5): Can't find a valid FAT filesystem
11:46:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresgid(&(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
setresgid(r1, r2, r3)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000080)={@rand_addr, @multicast1}, &(0x7f00000000c0)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x82, 0x2, 0x2}, 0x3f}}, 0x18)

[  144.934773] binder: 9703:9708 ioctl 40046205 8 returned -22
[  144.942907] binder: 9703:9708 BC_FREE_BUFFER u0000000000000000 no match
[  144.968501] binder: BINDER_SET_CONTEXT_MGR already set
[  144.976346] binder: 9722:9726 ioctl 40046207 0 returned -16
11:46:39 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fa", 0x62, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)="aff361716af2da3b0eb89e51c9e221c5461c62d801608d1c49e27b7d11b789062571994aae0017106711b0a0775dacf1a4efce9c8bd79d3199bc6ed3294729792130d80ae11df7fbfe12090af9a53d6db91f29c680c8e1ca1abfaab758d8b61f9239be082f65d92b920192bc64f978d7d382e111666ba3cbc7f194a1d6b36cece528432fa6fc96c7f9720005bacaab5b724e7fbdb085f69fcc375c7a403314fc7a4b27cdffcf8a57bce3e7caf14d66eeb990260ec5cb8c68f9d4bb839904a4bf5bf699b64006f920e6ab82f8c86228359985")
fchdir(r0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
fcntl$setpipe(r0, 0x407, 0x0)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/75)

11:46:39 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:39 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80080, 0x0)

11:46:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:39 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  145.705803] binder: BINDER_SET_CONTEXT_MGR already set
[  145.711291] binder: 9739:9743 ioctl 40046207 0 returned -16
[  145.734464] binder: 9703:9750 ioctl 40046205 8 returned -22
[  145.745419] binder: BINDER_SET_CONTEXT_MGR already set
11:46:39 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
r2 = fcntl$getown(r0, 0x9)
setpgid(r1, r2)
socketpair(0x2, 0x5, 0x1ce99cae, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040))
dup(r3)
r4 = getpgrp(0xffffffffffffffff)
fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x3, r4})

[  145.745425] binder: 9703:9756 ioctl 40046207 0 returned -16
11:46:39 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)

11:46:39 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:39 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:39 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:39 executing program 4:
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
open(&(0x7f0000000040)='./file0\x00', 0x44000, 0x11)

11:46:39 executing program 1:
getpgrp(0x0)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000040)="6e7300e2d9d44e9cd71c90aafd3ce57072b3efc35afd5010488cb41854c91e47c586f73f5aea48e6d91e78cbeda93597f096e547da9420a8992c958915b7e22ca713c36688451ab796197fa942ad1e3b1a341fae63679521eea3cb4d2d45224b7e6b9145561a74eb67c65e028396e41056c7f0450cafd76bd2df2bdb480a5cf9b20cfea5c042a905")
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

11:46:40 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443", 0x72, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:40 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:40 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:40 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x7fff, 0xfffffffffffffe07)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
fcntl$setsig(r0, 0xa, 0x30)

11:46:40 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:40 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x0)
r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x30, r0, 0x5)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={<r2=>r1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x6c, 0x0, &(0x7f00000002c0)=[@exit_looper={0x630d}, @free_buffer={0x40086303, r2}, @clear_death={0x400c630f, 0x4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x50, &(0x7f0000000080), &(0x7f0000000140)=[0x18, 0x40, 0x0, 0x28, 0x70, 0x0, 0x0, 0x38, 0x38, 0x78]}, 0x7}}], 0x45, 0x0, &(0x7f0000000340)="cb32c9b8b30842a5a19a1f80532df8caa26b07848a1e8b27153ca7869bda299eae160ffb3e97ee95fde00c9f6bcb55ef636696c526bd4bf1c1d12c6f1310d147d5bf955898"})
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:40 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:40 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:40 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:40 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)

11:46:40 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  146.691224] binder: BINDER_SET_CONTEXT_MGR already set
[  146.696545] binder: 9757:9815 ioctl 40046207 0 returned -16
[  146.726591] binder: 9816:9818 BC_FREE_BUFFER u0000000000000000 no match
11:46:40 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:40 executing program 5:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0))

11:46:40 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000240)='ns\x00')
fchdir(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  146.737208] binder: 9816:9818 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4
[  146.757610] binder: 9816:9818 got reply transaction with no transaction stack
[  146.786522] binder: 9816:9818 transaction failed 29201/-71, size 0-80 line 2926
[  146.804922] binder: 9816:9818 ioctl c0306201 200000c0 returned -14
[  146.812047] binder: BINDER_SET_CONTEXT_MGR already set
[  146.818495] binder: 9816:9849 ioctl 40046207 0 returned -16
[  146.826635] binder: 9816:9849 BC_FREE_BUFFER u0000000000000000 no match
[  146.833476] binder: 9816:9849 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4
[  146.840282] binder: 9816:9849 got reply transaction with no transaction stack
[  146.847564] binder: 9816:9849 transaction failed 29201/-71, size 0-80 line 2926
[  146.856141] binder: 9816:9849 ioctl c0306201 200000c0 returned -14
11:46:40 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443", 0x72, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:40 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x4c)

11:46:40 executing program 1:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040))
r0 = getpgid(0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000240)='ns\x00')
fchdir(r1)
fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', "070000007202000400000000000000fb813ece00"}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:40 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000140))
r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x200001)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0))
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000001c0))
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000))

11:46:40 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:40 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:40 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
sendfile(r0, r0, &(0x7f0000000040), 0x7fff)
fchdir(r0)

11:46:41 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)

11:46:41 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:etc_mail_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x0, 0x20, './file0\x00'}, 0x4c)

11:46:41 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000))

11:46:41 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x40)
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000300)='/dev/pktcdvd/control\x00', 0x400, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r2, 0x108, 0x70bd29, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1c000000000}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3373}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

[  147.540297] binder: 9863:9867 unknown command 0
[  147.554120] binder: 9863:9867 ioctl c0306201 200000c0 returned -22
11:46:41 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x30000, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x1, 0x6, 0x49440fdb, 0x4, 0x0, 0x8001, 0x5, 0x120000, 0x8001, 0x6})
r1 = timerfd_create(0x3, 0x80800)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r2)
init_module(&(0x7f0000000080)="e27d6574683000", 0x7, &(0x7f00000000c0)="070000007202000400000000000000fb813ece00")
ftruncate(r1, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)

11:46:41 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

11:46:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/151)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  147.586247] binder: BINDER_SET_CONTEXT_MGR already set
[  147.605275] binder: 9863:9885 ioctl 40046207 0 returned -16
11:46:41 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443", 0x72, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0)
ioctl$RTC_WIE_OFF(r1, 0x7010)

11:46:41 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:41 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80106, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000000)='\b'})
socket$inet_tcp(0x2, 0x1, 0x0)

11:46:41 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x3, 0x4a0, [0x20000500, 0x0, 0x0, 0x20000530, 0x20000640], 0x0, &(0x7f0000000140), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'teql0\x00', 'bond_slave_1\x00', 'bond_slave_1\x00', 'ip6gre0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xe0, [@cluster={'cluster\x00', 0x10, {{0x8000}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'team_slave_0\x00', '\x00', 'bridge0\x00', 'gre0\x00', @empty, [], @random="1a0538d190dd", [], 0x70, 0xf8, 0x228}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:netutils_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth1_to_bridge\x00', 'yam0\x00', '\x00', 'veth0_to_bridge\x00', @random="9c6fd05736b7", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10, {{@random="bf393a482b6e", 0xffffffffffffffff}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x80}}}}]}]}, 0x518)

11:46:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="6168850d47b46db657975b341c1738e2f64ec70239fa35bab8ea04a2227e379fc6f366e1e4d818baf2706efae2aed2c70b69624ae8bceaede0edf0d26957b7d5f0f77bf975ba85b730df896f83d7a1b3a4ff466b8209f3bf3fa419c00363bb8a5e57aa134b72b1403f276cad5592e84a4a7b892d1ee223fd3e3441f23b5285d910", 0x81, 0xfffffffffffffffe)
keyctl$get_security(0x11, r1, &(0x7f0000000280)=""/206, 0xce)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2, 0x0)

11:46:41 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:41 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
socket$inet6(0xa, 0x1000000000002, 0x0)
close(r0)
close(r1)

11:46:41 executing program 4:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f3479732f6ef4c7eb2e65742f697004000000732f736e61745f7265726f75746500", 0x2, 0x0)

11:46:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x200000000000000, 0x2)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000140))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:41 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
close(r0)

11:46:41 executing program 1:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgrp(r0)
r2 = syz_open_procfs(r1, &(0x7f0000000240)='ns\x00')
fchdir(r2)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="070000007202000400000000000000fb81003365a46655903ece0000007219486f282d1a49daf29bdcc38bb756b3d1077f1837e43a", 0x1ff)
connect$netlink(r2, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x508}, 0xc)

11:46:41 executing program 5:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ipx\x00')
r2 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x40000)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000040))
recvfrom(r1, &(0x7f00000000c0)=""/71, 0x47, 0x2000, &(0x7f0000000140)=@nl=@unspec, 0x80)

11:46:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x1d)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), 0x4)

11:46:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1000, 0x3, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4b43b9, 0x0, 0x5c3b, 0x7, 0x0, 0x6, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
poll(&(0x7f0000000240)=[{r1, 0x4400}], 0x1, 0x81)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

[  148.452351] binder: 9919:9922 ERROR: BC_REGISTER_LOOPER called without request
11:46:41 executing program 5:
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = inotify_init()
tee(r0, r1, 0x4, 0x9)
r2 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000040))

[  148.677213] hrtimer: interrupt took 10673 ns
11:46:42 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475", 0x7a, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:42 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:42 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:42 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090e00000080ffffff0000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff05000000000000000000000000000100f05a14d900000000000000"], 0x74}, 0x1}, 0x0)

11:46:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080))

11:46:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x25, 0x3f, 0x6})

11:46:42 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)=""/142, &(0x7f0000000040)=0x8e)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:42 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
socket$inet6(0xa, 0x1000000000002, 0x0)
close(r0)
close(r1)

11:46:42 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

[  149.358546] binder: BINDER_SET_CONTEXT_MGR already set
[  149.363967] binder: 9919:9978 ERROR: BC_REGISTER_LOOPER called without request
[  149.376928] binder: 9919:9973 ioctl 40046207 0 returned -16
11:46:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)=0x4)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2, <r2=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @loopback={0x0, 0x1}, 0x3, 0x8001, 0xffff, 0x400, 0x6, 0x80, r2})

11:46:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="1100", 0x1ff)

11:46:42 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="4c2f31000000000000000000bbc0", 0x1ff)

11:46:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
socketpair(0x11, 0x80802, 0x6, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x4)
write$selinux_validatetrans(r1, &(0x7f0000000080)={'system_u:object_r:system_map_t:s0', 0x20, 'system_u:object_r:tape_device_t:s0', 0x20, 0x200, 0x20, '/usr/sbin/cupsd\x00'}, 0x6a)

11:46:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x3ff)

[  149.405583] binder: 9994:9998 ERROR: BC_REGISTER_LOOPER called without request
[  150.209619] binder: BINDER_SET_CONTEXT_MGR already set
[  150.216642] binder: 9994:10033 ioctl 40046207 0 returned -16
[  150.225745] binder: 9994:10032 ERROR: BC_REGISTER_LOOPER called without request
11:46:43 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475", 0x7a, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
fadvise64(r0, 0x3a, 0x2, 0x1)

11:46:43 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:43 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20)

11:46:43 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:43 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a0040000400100004001000040010000b8000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x4f0)
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100))
sync()

11:46:43 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
socket$inet6(0xa, 0x1000000000002, 0x0)
close(r0)
close(r1)

11:46:43 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
readv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/159, 0x9f}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/132, 0x84}], 0x6)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
preadv(r0, &(0x7f0000001580)=[{&(0x7f0000001280)=""/23, 0x17}, {&(0x7f0000001400)=""/85, 0x55}, {&(0x7f0000001480)=""/244, 0xf4}], 0x3, 0x0)

11:46:43 executing program 1:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080))
gettid()
r0 = getpid()
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100, 0x0)
getdents64(r1, &(0x7f0000000140)=""/255, 0xff)
r2 = syz_open_procfs(r0, &(0x7f0000000100)="22022000ae00")
fchdir(r2)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:43 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:43 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28180, 0x0)
futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}})
r1 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

11:46:43 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  150.301658] binder: 10046:10049 ERROR: BC_REGISTER_LOOPER called without request
11:46:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8)
write$P9_RSTATu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="790000007d0200000061000100ff7f000010010000000500000000000000000080850600000001800000ffffffffffffffff03002b7b2903086e73001400070000007202000400000000000000fb813ece001400070000007202000400000000000000fb813ece0003006e7300", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3], 0x79)

11:46:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0))

11:46:43 executing program 5:
r0 = socket$inet6(0xa, 0x206, 0x200000001)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'team0\x00'})
setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d794b1ca06d5f9279484f1f8a2cee2946d46e2a2fff96ba7f"])
socket$key(0xf, 0x3, 0x2)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
socket$netlink(0x10, 0x3, 0x23)
syslog(0x9, 0x0, 0x0)
writev(r4, &(0x7f0000e11ff0), 0x10000000000000ba)
epoll_wait(r3, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0xff)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
r5 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000040))

[  150.478290] blk_update_request: I/O error, dev loop0, sector 0
[  150.484453] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  150.492299] blk_update_request: I/O error, dev loop0, sector 8
[  150.498269] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  150.505978] blk_update_request: I/O error, dev loop0, sector 16
[  150.512069] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  150.519738] blk_update_request: I/O error, dev loop0, sector 24
[  150.525819] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  150.533507] blk_update_request: I/O error, dev loop0, sector 32
[  150.539559] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  150.547239] blk_update_request: I/O error, dev loop0, sector 40
[  150.553498] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  150.561177] blk_update_request: I/O error, dev loop0, sector 48
[  150.567229] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  150.574908] blk_update_request: I/O error, dev loop0, sector 56
[  150.580967] Buffer I/O error on dev loop0, logical block 7, lost async page write
[  150.588628] blk_update_request: I/O error, dev loop0, sector 64
[  150.594698] Buffer I/O error on dev loop0, logical block 8, lost async page write
[  150.602377] blk_update_request: I/O error, dev loop0, sector 72
[  150.608438] Buffer I/O error on dev loop0, logical block 9, lost async page write
[  151.103798] binder: BINDER_SET_CONTEXT_MGR already set
[  151.109141] binder: 10046:10102 ioctl 40046207 0 returned -16
11:46:44 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475", 0x7a, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
socket$key(0xf, 0x3, 0x2)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
prctl$setptracer(0x59616d61, r1)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc)
fchdir(r0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6e7, 0x7fffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
creat(&(0x7f0000000080)='./file0\x00', 0xc0)

11:46:44 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:44 executing program 4:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x1fffc, 0x0)

11:46:44 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in=@dev}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)

11:46:44 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:44 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syncfs(r0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={<r1=>0x0})
r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x19)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x74, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08631040", @ANYRES64=r1, @ANYBLOB="010000000000000008631040", @ANYRES64=r2, @ANYBLOB="040000000000000012634840010000000000000002000000000000000000000011000000000000000000000030000000000000002000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000100000000000000852a687700010000", @ANYRES64=r3, @ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00x!\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e906000000000000"], 0x0, 0x0, &(0x7f0000000240)})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x101040, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', <r5=>0x0})
write$FUSE_STATFS(r4, &(0x7f0000000440)={0x60, 0x0, 0x3, {{0x0, 0x40, 0x80000001, 0x4, 0x8, 0x9, 0x80000000, 0x8000}}}, 0x60)
recvfrom$packet(r4, &(0x7f0000000300)=""/146, 0x92, 0x22, &(0x7f0000000400)={0x11, 0x15, r5, 0x1, 0x175, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:44 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:44 executing program 1:
r0 = getpgid(0x0)
syz_open_procfs(r0, &(0x7f0000000240)='ns\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x4}, 0xf)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0xc0, 0x0, 0x3, [{{0x6, 0x2, 0x8, 0x7f, 0x2, 0x7, {0x5, 0x0, 0x6, 0xffffffff, 0x7, 0x1000000000000, 0x9, 0x6, 0x7f, 0x7fffffff, 0x2d7d, r1, r2, 0xfffffffffffffffc, 0x1}}, {0x3, 0x4, 0x14, 0x7, "070000007202000400000000000000fb813ece00"}}]}, 0xc0)

11:46:44 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  151.405786] binder: 10125:10129 BC_INCREFS_DONE u0000000000000000 no match
[  151.413486] binder: 10125:10129 BC_INCREFS_DONE uffffffffffffffff no match
[  151.423049] binder: 10125:10129 got reply transaction with no transaction stack
[  151.432426] binder: 10125:10129 transaction failed 29201/-71, size 48-32 line 2926
11:46:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:44 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:44 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

[  151.458367] binder: 10125:10129 ioctl c0306201 200000c0 returned -14
[  151.487957] binder: 10125:10129 BC_INCREFS_DONE u0000000000000000 no match
[  151.498115] binder: 10125:10129 BC_INCREFS_DONE uffffffffffffffff no match
[  151.511083] binder: 10125:10129 got reply transaction with no transaction stack
[  151.519461] binder: 10125:10129 transaction failed 29201/-71, size 48-32 line 2926
[  151.527750] binder: 10125:10161 ERROR: BC_REGISTER_LOOPER called without request
[  151.529178] binder: BINDER_SET_CONTEXT_MGR already set
[  151.529184] binder: 10125:10154 ioctl 40046207 0 returned -16
[  151.552091] binder: undelivered TRANSACTION_ERROR: 29201
11:46:45 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354c", 0x7e, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:45 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
mount$9p_virtio(&(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4000, &(0x7f0000000100)={'trans=virtio,'})
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
socket$unix(0x1, 0x7, 0x0)
r1 = fcntl$dupfd(r0, 0x407, r0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xffffffffffffffff)

11:46:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
fchdir(r0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x200, 0xfff, 0x8, 0x10000}, 0x10)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="d34692924483a15188ddacab31f8e0444745782f7f1de6df842e319935d4c7d7fa890341fc1f223315b6058bd57e9882a1446f2aa6ef0058a272b2314bcd3c44c2f1c24f13c9c3944ae9eb87cba56e26fa1d2ba9efc27cd9140ad1e5b6bc0bf9c0ecfc4bd01a1eed6c77b491a01d107ea9fb6eb413b0f74e7755b397a04f1a70d3e9312cfc0e43c87f22a795c27c8fae6d61d8a3692ebaf06d669ff62ead5bf4b53a850f7b12106cd583db5ed95c59886a9adb88afd7e2573cf67a2180aa715428eed7107fb090becaca77700340c08e50cd37aae2")
getsockopt$inet6_tcp_int(r0, 0x6, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff)
getsockname$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x14)
ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000400)=0x3)
ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000380)="16ca2b641757f5ed7496a4c7ee577f48b6659d0ff775eff8cc624bd114a629b2a8682b23975e9f3748b33d9e223a2e43648bf15e374ac417fab31e7d92431caa86c67235b8b87ac7fc4d13c05c3231dab70740aa414e474bf93f7a8d7f2a4d924a9baf86b9c79d7e1c"})

11:46:45 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:45 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:45 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:45 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:45 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="99a08b"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:45 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:45 executing program 5:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c65cedfb6f5ec9e79151a290b369a341fbc836caa4a2f12d27c2bdfad66940c8655ea25f8eaa2b4089a85d6a04a15a3e1417928c90a8d3e0cd36", 0x3a}, {&(0x7f0000001140)="d30d212c9d17e9e951be38ba4bf436c3495ac9e27f329bb645f5f66a731ef7b9147a7dc65909ccedd7d2fb", 0x2b}], 0x4, 0x0)
syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
pipe2(&(0x7f0000000000), 0x4000)

11:46:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x1, 0xf1fa, 0x20, 'queue1\x00', 0x2})
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:45 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:45 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:45 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6e0400")
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
getpeername$packet(r0, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast2}}, &(0x7f0000001c00)=0xe8)
accept$packet(r0, &(0x7f0000001c40)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001c80)=0x14)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e00)={<r5=>0x0, @broadcast, @dev}, &(0x7f0000001e40)=0xc)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x2, {{0xa, 0x4e22, 0xfffffffffffffff7, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3}}}, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001e80)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000001f80)=0xe8)
accept$packet(r0, &(0x7f0000001fc0)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002000)=0x14)
accept4$packet(r0, &(0x7f0000002080)={0x0, 0x0, <r8=>0x0}, &(0x7f00000020c0)=0x14, 0x80000)
accept$packet(r0, &(0x7f0000002280)={0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000022c0)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002300)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000002400)=0xe8)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000540)=""/63)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002500)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000002600)=0xe8)
getpeername(r0, &(0x7f0000002640)=@ll={0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000026c0)=0x80)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB="80030000", @ANYRES16=r1, @ANYBLOB="000b2abd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="a401020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004001f00000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000010038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000800a50d992a03000300fd0008000400", @ANYRES32=r6, @ANYBLOB="0300070000a419276e11c544cdf4b629d21763960890a973c7000100", @ANYRES32=r7, @ANYBLOB="400002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="700102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff01000008000600", @ANYRES32=r11, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004007b070000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004007f000000"], 0x380}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

11:46:45 executing program 5:
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x2, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040))

[  152.237426] binder: 10186:10200 unknown command 9150617
[  152.262821] binder: 10186:10200 ioctl c0306201 200000c0 returned -22
[  152.285455] binder: BINDER_SET_CONTEXT_MGR already set
[  152.293788] binder: 10186:10220 ioctl 40046207 0 returned -16
11:46:46 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354c", 0x7e, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:46 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

11:46:46 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:46 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400082, 0x0)
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)

11:46:46 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000280)=""/164)
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$KDDISABIO(r0, 0x4b37)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x4, 0x3, 0x80, 0x4, 0x400, 0x5})
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r1, r2/1000+30000}, {0x0, 0x2710}}, 0x0)

11:46:46 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14282, 0x0)
accept4$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x80000)
r2 = geteuid()
r3 = getuid()
mount$9p_virtio(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x40000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=virtio,cache=loose,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',privport,privport,#ache=loose,access=', @ANYRESDEC=r3, @ANYBLOB=',cache=fscache,\x00'])
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:46 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:46 executing program 1:
gettid()
getpgrp(0xffffffffffffffff)
r0 = getpgid(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/fib_trie\x00')
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)

11:46:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080))

11:46:46 executing program 4:
rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x0, 0x7, 0x9, 0x1ff80})

11:46:46 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000003540)='net/udp\x00')
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  153.090106] binder: 10235:10238 ERROR: BC_REGISTER_LOOPER called without request
11:46:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x40206)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000002740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002700)={&(0x7f0000000140)={0x258c, 0x6, 0x2, 0x104, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x4}, [@typed={0x8, 0x90, @u32=0x36d}, @generic="8ed0339250d39e0cde0c1d8aa23c263a4bf5675c8bdf9b3606dd8bc94bfd126cbcc1e580a33cba01de8649d4c9386e95f10e2b13b3985fc263c525bac82e1db23e1712ca1f2876d6f1f02b78e4347a48981b0616711c11807358fa813710bbd68517dbb596b50069ea0af1c854d73be7928dff53dcde22a93ab7b256dcadf02ed8b1a7182af7888ab6353b7eba756f7dc4bc5244d730", @nested={0xb8, 0x5f, [@generic="12d1d1239ce4e9a040c32c12e495de461d0ce3eedb49ec3809ce7a87f99756b76729bd9e38a284acdada8f01a57ac14c747a655cae59faceb8e0302034ef72b55b56877646084843d25dbcd795c88e64e7e5cc115935f7ccd21ec64872073c4e628bbf7d578992635f81dbec4138f206b40ff53b5c9fc76aca68eef9b4af0b9780e12de6cf3165f01885f80f2f37c66a9640b4ea1bed0337ad69d9e3d9a6521da3115f501749a4557a58b827228f6f0d8ed9"]}, @generic="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", @nested={0x1a0, 0xd, [@typed={0x4, 0x1a}, @typed={0x8, 0x55, @u32=0x7}, @typed={0x14, 0x7b, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x4, 0x4}, @generic="2f27a77c10a813f3c1521acc23e03cc7aa9981ea03fb2bbf1b81c99578c9b5d4d967eebc389060a3acfbd02ffef339d775bb6b9b5eaff17b4a16d555dcb5230b6c151c4cd9a0b9e842186179e4fd1ee1b34f7b808bec612c7c2fb8a5db9c2e4750a3600108926faad1108b82cdeca15e782cf9a449186ceefd0e747e09e1cee25c82932cd0bb33ddbbeb87129ef2a6992ef4633a6a8673d5935a2e807a7e77f151866643b87ee93d0550590ec2c12b64679001282669b0c3d30f64a32ac0f0c703bf14d1bcea6b18c27585234556ee67db2316ea8fd12e2489", @typed={0x8, 0x68, @fd=r0}, @generic="23e94d34fbe85383592c0d0a6a221a92980bb447b97ba58e3dd333dd5ce674fb823c4582b5ce515b6c7aa4cc03f13ce179955eaa367365ae9704bc08de30943ff93e88e75842f372d064023333e3578fa4e087a662badcb8619c3b636379724699d0a778e5c94cebeea9cd721ac08cda50603d7f74b15d763b785ef0853024846196d6530ab76a4a21b7b5b35707820187c803c0"]}, @typed={0x80, 0x85, @binary="1336a71e90c1ae74ef86e6af02a04fdcd04c349a3c01cb4888d1d310510c8dcd197441717fb3edac195c6a865c1bd1d6058db77f468ffd1c5177468858b79f39c78f432520ebb0fc053ef3c49f7697aeeb0193621cd0b217d9e22549d97266bd0054470b079c33537204e28a92dbafcd197715bf340de23e7951"}, @nested={0xe0, 0x70, [@typed={0x8, 0x0, @u32=0x4}, @typed={0xd4, 0x8, @binary="e64f7ba541e76ee3b29bd78b0c9278f06c43543dad54a1be217e87d45da5d6aeca075eaff8128c36f3e3b1209d6ef35182e3fc27db419d432ba5413db24ea028c41ed075ef2a68a0ce11b3574c9792993ee512dfdb882c50447d189fe983801f1efa1fa36f9098e2a434c3d4efbf0a49c22f56edfe592a04b1f23566178a29139152c51eed287c893577b39d7baf45a6b3865fcc8d18ba7ba1bea13759c94947a3bb29bc1cd9697437888fd111ca08f3d5beb4515be951337e41349569b9ded321504733a2686a1fdf4f4da4e35009"}]}, @nested={0x10b4, 0x41, [@generic="d1eaf53311f91f674c02b51b108d1ca400a5b5af1e47a3a73d0e5ec20cbcc3b88591600bd9f9c7213b8a36377f63e91ace1c36c1739290d1b99c073c94215275c9b461a458f01fbfe9c5a76eb383bdb0292fdad712c8d213a52442a72b6b9b42fd3124b5c0590e4f3d1f7f7027f70c04aa0ca269ead4662c0ce1352cbce9cbb246299dfaeef00f6fc7258ecc6471e1dcf65184202e5286c6203cc22cdb268ecc776ce5fe93ba6770a0c4d5596a", @generic="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"]}, @generic="fade30a9aa3d76a447235b71c8bf4979301117b561c6f1462b09db7ff3852852990edefd165ec748989d5ddf71367b4077f2cf06b798594d2735d9532e8fa6", @generic="cbb573b9f3c8e3a0206d49b67f37c97767bd886a67d622b216af526627f6a5dccc05045f82ef7e4165083855aa44"]}, 0x258c}, 0x1, 0x0, 0x0, 0x51}, 0x40)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
getpgid(r2)

11:46:47 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354c", 0x7e, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:47 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:47 executing program 4:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:47 executing program 1:

[  153.991601] binder: BINDER_SET_CONTEXT_MGR already set
[  154.001422] binder: 10235:10285 ioctl 40046207 0 returned -16
[  154.015316] binder: 10235:10285 ERROR: BC_REGISTER_LOOPER called without request
11:46:47 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8100, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffffc1, 0x10000)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x20, 0x2, 0x1})
r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6c000000, &(0x7f0000000280)='\b'})

11:46:47 executing program 5:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040))
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=""/31, &(0x7f00000002c0)=0x1f)

11:46:47 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:47 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:47 executing program 1:

11:46:47 executing program 4:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:47 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:47 executing program 1:

11:46:47 executing program 4:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
read$FUSE(r0, &(0x7f00000020c0), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x0)
mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x10, 0x0, 0x2}, 0x10)

11:46:47 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

[  154.169421] binder: BINDER_SET_CONTEXT_MGR already set
[  154.190323] binder: 10306:10309 ioctl 40046207 0 returned -16
[  154.205973] binder: 10306:10309 ERROR: BC_REGISTER_LOOPER called without request
11:46:48 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x3, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f1", 0x80, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="ee", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0})
clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280))
sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000002}, 0x10)

11:46:48 executing program 4:
rt_sigaction(0x0, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:48 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
close(r1)

11:46:48 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

11:46:48 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x0, 0x6c000000, &(0x7f0000000280)})

11:46:48 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

11:46:48 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76")
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

11:46:48 executing program 3:
fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(0xffffffffffffffff)
close(0xffffffffffffffff)

11:46:48 executing program 4:
rt_sigaction(0x0, &(0x7f0000000000)={0x800000000040040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x800000000044032, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)

11:46:48 executing program 7:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/member\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000940), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/keychord\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/rtc0\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/user\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000c00), 0x8, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/user\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/access\x00', 0x2, 0x0)
creat(&(0x7f0000001780)='./file0\x00', 0x0)
inotify_init()
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/pktcdvd/control\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000003500)='/dev/ashmem\x00', 0x0, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000003580)='/dev/pktcdvd/control\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000035c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000003880)='/dev/null\x00', 0x0, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/enforce\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005780)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x0)
eventfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000005800)='/dev/sequencer\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/autofs\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005b40)='/selinux/relabel\x00', 0x2, 0x0)
syz_open_dev$binder(&(0x7f0000005b80)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

[  154.968638] binder_alloc: binder_alloc_mmap_handler: 10306 20001000-20004000 already mapped failed -16
[  154.981568] binder: BINDER_SET_CONTEXT_MGR already set
[  154.987485] binder: 10306:10345 ioctl 40046207 0 returned -16
[  154.987502] binder: BINDER_SET_CONTEXT_MGR already set
[  154.987507] binder: 10306:10344 ioctl 40046207 0 returned -16
[  155.007870] binder: 10306:10344 ERROR: BC_REGISTER_LOOPER called without request
[  155.022673] binder: 10349:10351 ERROR: BC_REGISTER_LOOPER called without request
[  155.029747] BUG: unable to handle kernel paging request at ffffed00598ee7ff
[  155.029760] IP: [<ffffffff8190dd62>] fuse_dev_do_write+0x1112/0x20a0
[  155.029766] PGD 21fffb067 
[  155.029768] PUD 21fff9067 
[  155.029769] PMD 0 
[  155.029769] 
[  155.029774] Oops: 0000 [#1] PREEMPT SMP KASAN
[  155.029778] Dumping ftrace buffer:
[  155.029781]    (ftrace buffer empty)
[  155.029784] Modules linked in:
[  155.029789] CPU: 0 PID: 10320 Comm: syz-executor1 Not tainted 4.9.112-g9e79039 #7
[  155.029792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  155.029795] task: ffff8801d3951800 task.stack: ffff88019ff60000
[  155.029803] RIP: 0010:[<ffffffff8190dd62>]  [<ffffffff8190dd62>] fuse_dev_do_write+0x1112/0x20a0
[  155.029806] RSP: 0018:ffff88019ff67910  EFLAGS: 00010a07
[  155.029809] RAX: dffffc0000000000 RBX: ffff8801b87aa6d8 RCX: ffff8801cc774000
[  155.029812] RDX: 1ffff100598ee7ff RSI: ffff8802cc773fff RDI: ffff8801b87aa788
[  155.029815] RBP: ffff88019ff67ba0 R08: 0000000000000000 R09: 0000000000000001
[  155.029818] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  155.029821] R13: ffff88019ff67bd0 R14: ffff8801d95afe40 R15: 1ffff10033fecf2f
[  155.029825] FS:  00007f531be91700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[  155.029829] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  155.029832] CR2: ffffed00598ee7ff CR3: 00000001cbbcb000 CR4: 00000000001606f0
[  155.029837] DR0: 00000000200001c0 DR1: 00000000200001c0 DR2: 0000000000000000
[  155.029840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  155.029841] Stack:
[  155.029848]  ffff880100000000 ffff88019ff67bd0 ffff8801b87aa6d8 ffff8801b87aa788
[  155.029854]  ffff880100000001 ffff880100001000 ffff8801b87aa774 ffff8801d95afe48
[  155.029860]  ffff8801b87aa780 ffff8801b87aa708 ffff8801d95afe50 ffff88019de35500
[  155.029861] Call Trace:
[  155.029871]  [<ffffffff8190cc50>] ? end_requests+0x140/0x140
[  155.029878]  [<ffffffff812d43c0>] ? futex_wait_setup+0x330/0x330
[  155.029885]  [<ffffffff81ebe8ea>] ? plist_check_head+0x4a/0x60
[  155.029890]  [<ffffffff81ebed3f>] ? plist_del+0x14f/0x200
[  155.029895]  [<ffffffff812d3dea>] ? futex_wake+0x1aa/0x450
[  155.029901]  [<ffffffff812d3c40>] ? get_futex_key+0x1090/0x1090
[  155.029909]  [<ffffffff81236824>] ? __lock_acquire+0x654/0x4070
[  155.029913]  [<ffffffff8190fa2b>] fuse_dev_write+0x14b/0x1e0
[  155.029919]  [<ffffffff8190f8e0>] ? fuse_dev_splice_write+0xbf0/0xbf0
[  155.029924]  [<ffffffff812d7c70>] ? exit_robust_list+0x220/0x220
[  155.029929]  [<ffffffff8164d994>] ? fsnotify+0x114/0x1100
[  155.029934]  [<ffffffff81ef1a9f>] ? iov_iter_init+0xaf/0x1d0
[  155.029939]  [<ffffffff8156ecb0>] __vfs_write+0x3e0/0x580
[  155.029944]  [<ffffffff8156e8d0>] ? default_llseek+0x280/0x280
[  155.029950]  [<ffffffff81cf89f9>] ? avc_policy_seqno+0x9/0x20
[  155.029954]  [<ffffffff81d08742>] ? selinux_file_permission+0x82/0x470
[  155.029958]  [<ffffffff815723d5>] ? rw_verify_area+0xe5/0x2b0
[  155.029963]  [<ffffffff81572aa7>] vfs_write+0x187/0x530
[  155.029967]  [<ffffffff815768d9>] SyS_write+0xd9/0x1c0
[  155.029972]  [<ffffffff81576800>] ? SyS_read+0x1c0/0x1c0
[  155.029977]  [<ffffffff810061b8>] ? do_syscall_64+0x48/0x490
[  155.029981]  [<ffffffff81576800>] ? SyS_read+0x1c0/0x1c0
[  155.029985]  [<ffffffff81006316>] do_syscall_64+0x1a6/0x490
[  155.029991]  [<ffffffff839f9f53>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  155.030060] Code: 02 84 c0 74 08 3c 03 0f 8e 76 0d 00 00 8b 83 b0 00 00 00 83 e8 01 48 8d 34 01 48 b8 00 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 <0f> b6 04 02 48 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 ab 0b 00 
[  155.030065] RIP  [<ffffffff8190dd62>] fuse_dev_do_write+0x1112/0x20a0
[  155.030066]  RSP <ffff88019ff67910>
[  155.030068] CR2: ffffed00598ee7ff
[  155.030073] ---[ end trace 3d37d04f378d832a ]---
[  155.030076] Kernel panic - not syncing: Fatal exception
[  155.030553] Dumping ftrace buffer:
[  155.030554]    (ftrace buffer empty)
[  155.030556] Kernel Offset: disabled
[  155.398120] Rebooting in 86400 seconds..