0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)={&(0x7f0000003280)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000005100)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 265.411453] binder: 14051:14057 got reply transaction with no transaction stack [ 265.426735] binder: 14050:14067 transaction failed 29201/-22, size 0-0 line 3108 [ 265.448052] binder: 14051:14057 transaction failed 29201/-71, size 64-80 line 3025 [ 265.457663] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.465347] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.490713] binder_alloc: binder_alloc_mmap_handler: 14051 20001000-20004000 already mapped failed -16 [ 265.519769] binder: 14051:14057 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 265.530242] binder: BINDER_SET_CONTEXT_MGR already set [ 265.538662] binder: 14051:14057 Acquire 1 refcount change on invalid ref 1 ret -22 [ 265.546533] binder: 14051:14070 ioctl 40046207 0 returned -16 [ 265.551276] binder: 14051:14057 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 265.553636] binder_alloc: 14051: binder_alloc_buf, no vma [ 265.562069] binder: 14051:14057 got reply transaction with no transaction stack [ 265.565851] binder: 14051:14091 got transaction to invalid handle [ 265.574017] binder: 14051:14057 transaction failed 29201/-71, size 64-80 line 3025 15:33:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) 15:33:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)=""/233) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:47 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:33:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:33:47 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)={&(0x7f0000003280)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:47 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 265.579562] binder: 14051:14070 transaction failed 29189/-3, size 24-8 line 3254 [ 265.587585] binder: 14051:14091 transaction failed 29201/-22, size 0-0 line 3117 [ 265.599458] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.607950] binder: undelivered TRANSACTION_ERROR: 29189 [ 265.613509] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.633698] binder: undelivered TRANSACTION_ERROR: 29189 15:33:47 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file1\x00', 0x144, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setaffinity(r1, 0xfffffffffffffe0c, &(0x7f0000000400)=0x8000009) creat(&(0x7f0000000200)='./bus\x00', 0x4) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x200) getpgrp(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0), 0x0) r4 = socket$inet6(0xa, 0x1, 0x1000000000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = gettid() sched_setaffinity(r5, 0x8, &(0x7f00000004c0)=0x20) fcntl$setflags(r3, 0x2, 0x0) r6 = dup(r4) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000200004771dda9c1bc2ed47dff08"], 0x0, 0x0, 0x20, &(0x7f00000003c0)='\x00') io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000340)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:33:47 executing program 4: io_setup(0x2, &(0x7f0000000040)=0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000001c0)="cfb42a757edce0582ec93ba226f9c6613d8bdb89309ab604f8fbdd73dabb5945f317b6c0512b7985d4b0a950098191002bdf23974ceb78cf5c37e4f3f17d7a4906e7f96959481e9201a460555dd76472c6bac6dda2d059f6143cc2fbdd03cf11257d690dae92c8800b0dee042f2b21ab3fa88ad9ad80cd4cea51a17b4eca95d5ebfc73f2900553daa5056abf9f16e9d9494a2db1570dbd158dcb72a49503ccfb3a36cf6ec70a6654bd14ad6c5c4bc860d257499a5f121609aa315f5219e41b", 0xbf, 0xc7, 0x0, 0x2, r2}, &(0x7f00000002c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) write$P9_RVERSION(r2, &(0x7f0000000440)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) dup3(r3, r4, 0x0) [ 265.648342] binder: 14093:14100 got transaction to context manager from process owning it [ 265.652148] binder: send failed reply for transaction 485 to 14051:14070 [ 265.660373] binder: 14093:14100 transaction failed 29201/-22, size 0-0 line 3108 [ 265.672302] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.678225] binder: undelivered TRANSACTION_COMPLETE [ 265.690826] binder: undelivered TRANSACTION_ERROR: 29189 15:33:47 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)={&(0x7f0000003280)='./file0\x00', 0x0, 0x10}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 265.710770] binder_alloc: 14093: binder_alloc_buf, no vma [ 265.710970] binder: BINDER_SET_CONTEXT_MGR already set [ 265.722656] binder: 14098:14104 got transaction to context manager from process owning it [ 265.745670] binder: 14093:14109 transaction failed 29189/-3, size 0-0 line 3254 [ 265.754705] binder: 14098:14104 transaction failed 29201/-22, size 24-8 line 3108 [ 265.760617] binder: 14093:14100 ioctl 40046207 0 returned -16 [ 265.772649] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.777849] binder: 14098:14122 got transaction to invalid handle [ 265.797389] binder: undelivered TRANSACTION_ERROR: 29189 15:33:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe400040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x310, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000000c0)=r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xfffffffffffffffe}) dup3(r0, r1, 0x0) [ 265.804601] binder: 14098:14122 transaction failed 29201/-22, size 0-0 line 3117 [ 265.844974] binder: BINDER_SET_CONTEXT_MGR already set [ 265.852752] binder: 14098:14122 ioctl 40046207 0 returned -16 [ 265.867207] binder: 14098:14122 got transaction to invalid handle [ 265.878362] binder: 14098:14122 transaction failed 29201/-22, size 0-0 line 3117 [ 265.886748] binder: undelivered TRANSACTION_ERROR: 29201 15:33:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x1, 0xffffffff, 0x80, 0xc2d, 0x0, 0x4, 0x28000, 0x2, 0x3, 0x4, 0x53b, 0x9, 0x3f, 0xffffffffffff0001, 0x100000001, 0x8, 0x4, 0x1, 0x8, 0x2, 0x1f, 0x2, 0xb0d3, 0xfffffffffffffffe, 0x80, 0x7fff, 0x8001, 0x80000000, 0x800, 0xac, 0x9915, 0x3, 0x2c, 0xffff, 0x1, 0xc7, 0x0, 0x80000000, 0x6, @perf_bp={&(0x7f0000000040), 0x2}, 0x200, 0x3, 0x1, 0xf, 0x4, 0x4, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:47 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:47 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @default}, [@remote, @rose, @remote, @remote, @netrom, @remote, @bcast, @bcast]}, &(0x7f0000000100)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x334, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000000080)=0x8) [ 265.893235] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.912230] binder: undelivered TRANSACTION_ERROR: 29201 15:33:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 265.966400] binder: BINDER_SET_CONTEXT_MGR already set [ 265.987127] binder: 14136:14143 got transaction to context manager from process owning it [ 266.011478] binder: 14140:14146 ioctl 40046207 0 returned -16 [ 266.014202] binder_alloc: 14136: binder_alloc_buf, no vma [ 266.027613] binder: 14136:14143 transaction failed 29201/-22, size 0-0 line 3108 [ 266.042884] binder: 14140:14155 transaction failed 29189/-3, size 24-8 line 3254 [ 266.052581] binder: BINDER_SET_CONTEXT_MGR already set [ 266.062088] binder: 14140:14146 got transaction to invalid handle [ 266.068342] binder: 14140:14146 transaction failed 29201/-22, size 0-0 line 3117 [ 266.076177] binder: 14136:14157 ioctl 40046207 0 returned -16 [ 266.084171] binder_alloc: binder_alloc_mmap_handler: 14140 20001000-20004000 already mapped failed -16 [ 266.089782] binder_alloc: 14136: binder_alloc_buf, no vma [ 266.094754] binder: BINDER_SET_CONTEXT_MGR already set [ 266.099339] binder: 14136:14157 transaction failed 29189/-3, size 0-0 line 3254 [ 266.104845] binder_alloc: 14136: binder_alloc_buf, no vma [ 266.112789] binder: undelivered TRANSACTION_ERROR: 29189 [ 266.117792] binder: 14140:14146 ioctl 40046207 0 returned -16 [ 266.129506] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.130014] binder: 14140:14155 transaction failed 29189/-3, size 24-8 line 3254 [ 266.144032] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.149518] binder: undelivered TRANSACTION_ERROR: 29189 [ 266.155305] binder: undelivered TRANSACTION_ERROR: 29189 15:33:48 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) fcntl$setlease(r0, 0x400, 0x1) 15:33:48 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:48 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x84000, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x200000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) r5 = dup3(r2, r3, 0x0) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000200)={0x80ff, 0x3}) 15:33:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:48 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000010000000000000000000000000b17d533ff995afc500000000009e9b946ee7f1f3fd364f0000000000000000e6009b0c0000100000000000000000000080000000000000000066"], 0x0, 0x0, 0x0}) 15:33:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$notify(r2, 0x402, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000d124b1feaf97cb9a21a27e5b3baefb8bdea1d1a80e63119a30450f9f958a8bfde7fc5f0b2bd7d4dc986cdec50694cbe0c04f901003ad65a19bad87a91311078784cbe3e7114372b10a82b920d18020af8f8c55a5d48729efd5c378e8585ef9807af026a1fc067abee8d6f37d3d68e043b9df0ca386fb719ba494248cf041ce6fdb774bb13048ddcf3b5c3d80a16e81624c50efcab177278e5512b582f87f5a5140b6f8119fba34f20d1911a55d40b5e05aa0b291c887337af2c282170a175916"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r1, 0x0) [ 266.543177] binder: 14165:14168 got transaction to invalid handle [ 266.552456] binder: BINDER_SET_CONTEXT_MGR already set [ 266.558066] binder: 14165:14168 transaction failed 29201/-22, size 22296987507484526--1873497444986126336 line 3117 [ 266.570154] binder: 14166:14169 ioctl 40046207 0 returned -16 [ 266.578092] binder_alloc: 14165: binder_alloc_buf, no vma 15:33:48 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:48 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) epoll_create(0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2102, 0x0) fcntl$setlease(r1, 0x400, 0xfffffffffffffffe) fcntl$setlease(r1, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x9, 0x3, 0x1}}) 15:33:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000640)={@empty, r5}, 0x14) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000680)={{0xa, 0x4e21, 0x858, @empty, 0x6}, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0xfffffffffffffffe}, 0x6, [0xe14f, 0x6814, 0x6, 0x0, 0x5, 0x1, 0x6, 0x3]}, 0x5c) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x701, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x1, 0x2a8, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x9, 0xdadb, 'hsr0\x00', 'veth0_to_bond\x00', '\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xf0f683e45304027e, 0xff, 0xff], 0x120, 0x198, 0x1e8, [@rateest={'rateest\x00', 0x48, {{'sit0\x00', 'ip6erspan0\x00', 0x8, 0x1, 0x8000, 0x100000001, 0xee8, 0xc65d, 0x6, 0x2}}}, @time={'time\x00', 0x18, {{0x2, 0x203eb989, 0xbe75, 0xf57f, 0x4, 0xfffffffffffffffb, 0x2}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x401, 0x5, 0xfe14, 0x0, 0x0, "b40dccd75a1293d6a47930e9134b552fa57f9d82a382c325821479189d25573551e91e24fd2a098d682e7081e02e30df6832dacffaac548b4e1c68a3bedfe20d"}}}]}, @common=@log={'log\x00', 0x28, {{0x9, "2a58ff3eda5ec1ce7d635c575acb8e754705045745c3f9b76b4a628b14fa", 0x2}}}}]}]}, 0x320) [ 266.590721] binder: BINDER_SET_CONTEXT_MGR already set [ 266.593724] binder: 14166:14169 transaction failed 29189/-3, size 24-8 line 3254 [ 266.619607] binder: 14165:14177 ioctl 40046207 0 returned -16 [ 266.623503] binder: 14166:14183 got transaction to invalid handle 15:33:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r1, 0x0) 15:33:48 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/180) 15:33:48 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 266.638267] binder: 14165:14168 got transaction to invalid handle [ 266.645005] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.652121] binder: 14165:14168 transaction failed 29201/-22, size 22296987507484526--1873497444986126336 line 3117 [ 266.663693] binder: 14166:14183 transaction failed 29201/-22, size 0-0 line 3117 [ 266.686910] binder: undelivered TRANSACTION_ERROR: 29201 15:33:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r1, 0x0) 15:33:48 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="007a404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086000000"], 0x0, 0x0, 0x0}) 15:33:48 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x13e, 0xfffffffffffffffc) fcntl$setlease(r0, 0x400, 0x0) linkat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x1000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000380)={0x54, 0x5, 0x5, {0x88, 0x18d}, {0x7e, 0x1f4a4332}, @period={0x5a, 0xe8c8, 0x7f, 0x81, 0x1, {0x100, 0x77f, 0x10000, 0x100000001}, 0x6, &(0x7f0000000340)=[0x8, 0x1f, 0x6, 0x7, 0x2, 0x7ff]}}) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="5a5d4df13ea3241d836a2eec31c191540b5fc5692b68125b780d40d318f4b3a4861ec9e352129d29f00777d653884d9e30b432060e1b897f8b8d5ecc9695413e97", 0x41}, {&(0x7f0000000240)="174d6314d04acd3d55473e58923b14f4364d261c198b294f34a8bee880cc0be5f3174ce4883d100a39125703b299177e2928", 0x32}], 0x2, 0x1) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getgroups(0x4347, &(0x7f0000000080)=[0x0, 0xee01]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) fcntl$setlease(r0, 0x400, 0x1) [ 266.712570] binder_alloc: binder_alloc_mmap_handler: 14166 20001000-20004000 already mapped failed -16 [ 266.739985] binder_alloc: 14166: binder_alloc_buf, no vma [ 266.746064] binder: 14166:14169 transaction failed 29189/-3, size 24-8 line 3254 [ 266.754338] binder: 14166:14183 got transaction to invalid handle 15:33:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 266.771307] binder: 14166:14183 transaction failed 29201/-22, size 0-0 line 3117 [ 266.780664] binder: BINDER_SET_CONTEXT_MGR already set [ 266.793147] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.805893] binder: undelivered TRANSACTION_ERROR: 29189 [ 266.811547] binder: 14202:14205 ioctl 40046207 0 returned -16 15:33:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000040)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:48 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 266.828086] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.830903] binder: 14202:14216 unknown command 1077967360 [ 266.843321] binder: undelivered TRANSACTION_ERROR: 29189 15:33:48 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x2fc, 0x12) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) iopl(0xd2) fcntl$setlease(r0, 0x400, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x100000001) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) 15:33:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) dup3(r0, r1, 0x0) [ 266.870220] binder: 14202:14216 ioctl c0306201 200000c0 returned -22 [ 266.892864] binder: 14202:14205 unknown command 1077967360 [ 266.899000] binder: 14202:14205 ioctl c0306201 200000c0 returned -22 15:33:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:48 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 266.921020] binder_alloc: 14218: binder_alloc_buf, no vma [ 266.931225] binder: 14218:14223 transaction failed 29189/-3, size 0-0 line 3254 15:33:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, ',%self.!#@em1'}, {}, {0x20, 'ppp0)md5sumppp0u!eth1'}], 0xa, "7c4bc3c7a03c7a5ff54d2d06e4492de07590d2ac2e0264a3666ac50ead94506653942fca6546e3baf002e94b586975c640dd15e6bc0fcd4e0225c0aa2628a3c5df78245762d8d81e16a1453c10a7e407d9108133213a84cb78b8d95efefb"}, 0x8e) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:48 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0xfffffdfffffffffe) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_MCE_KILL_GET(0x22) 15:33:48 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 266.991202] binder_alloc: binder_alloc_mmap_handler: 14218 20001000-20004000 already mapped failed -16 [ 267.005827] binder: BINDER_SET_CONTEXT_MGR already set [ 267.022614] binder: 14237:14242 ioctl 40046207 0 returned -16 [ 267.045713] binder_alloc: 14218: binder_alloc_buf, no vma [ 267.074633] binder: 14237:14242 transaction failed 29189/-3, size 0-0 line 3254 [ 267.082149] binder: BINDER_SET_CONTEXT_MGR already set [ 267.082162] binder: 14218:14243 ioctl 40046207 0 returned -16 [ 267.082276] binder_alloc: 14218: binder_alloc_buf, no vma [ 267.095954] binder: BINDER_SET_CONTEXT_MGR already set [ 267.100428] binder: 14218:14243 got transaction to invalid handle [ 267.105057] binder: 14237:14262 ioctl 40046207 0 returned -16 [ 267.116937] binder: 14218:14243 transaction failed 29201/-22, size 0-0 line 3117 [ 267.128374] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.129750] binder: 14237:14242 transaction failed 29189/-22, size 0-0 line 3117 [ 267.134012] binder: send failed reply for transaction 517 to 14218:14223 [ 267.149829] binder: 14218:14223 transaction failed 29189/-3, size 24-8 line 3254 [ 267.158941] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.172010] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.179036] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.190372] binder: undelivered TRANSACTION_ERROR: 29189 15:33:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000003, 0x110, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007800)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000680)=""/95, 0x5f}], 0x9, &(0x7f00000007c0)=""/73, 0x49}, 0x5}, {{&(0x7f0000000840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000003c40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/1, 0x1}, {&(0x7f00000019c0)=""/197, 0xc5}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/201, 0xc9}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/29, 0x1d}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x9}, 0x654}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003d00)=""/66, 0x42}, {&(0x7f0000003d80)=""/14, 0xe}, {&(0x7f0000003dc0)=""/137, 0x89}, {&(0x7f0000003e80)=""/247, 0xf7}, {&(0x7f0000003f80)=""/25, 0x19}, {&(0x7f0000003fc0)=""/132, 0x84}, {&(0x7f0000004080)=""/3, 0x3}, {&(0x7f00000040c0)=""/148, 0x94}], 0x8, &(0x7f0000004200)=""/187, 0xbb}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000042c0)=""/133, 0x85}, {&(0x7f0000004380)=""/225, 0xe1}, {&(0x7f0000004480)=""/242, 0xf2}], 0x3, &(0x7f00000045c0)=""/33, 0x21}, 0x411}, {{&(0x7f0000004600)=@sco, 0x80, &(0x7f0000005800)=[{&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/85, 0x55}, {&(0x7f0000005700)=""/253, 0xfd}], 0x3, &(0x7f0000005840)=""/180, 0xb4}, 0x80000001}, {{&(0x7f0000005900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005980)=""/224, 0xe0}, {&(0x7f0000005a80)=""/88, 0x58}, {&(0x7f0000005b00)=""/226, 0xe2}, {&(0x7f0000005c00)=""/85, 0x55}, {&(0x7f0000005c80)=""/81, 0x51}], 0x5, &(0x7f0000005d80)=""/231, 0xe7}}, {{&(0x7f0000005e80)=@isdn, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005f00)=""/90, 0x5a}], 0x1, &(0x7f0000005fc0)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000006fc0)=@can, 0x80, &(0x7f0000007440)=[{&(0x7f0000007040)=""/51, 0x33}, {&(0x7f0000007080)=""/78, 0x4e}, {&(0x7f0000007100)=""/47, 0x2f}, {&(0x7f0000007140)=""/102, 0x66}, {&(0x7f00000071c0)=""/57, 0x39}, {&(0x7f0000007200)=""/89, 0x59}, {&(0x7f0000007280)=""/158, 0x9e}, {&(0x7f0000007340)=""/246, 0xf6}], 0x8, &(0x7f00000074c0)=""/3, 0x3}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f0000007500)=""/85, 0x55}, {&(0x7f0000007580)=""/90, 0x5a}, {&(0x7f0000007600)=""/251, 0xfb}], 0x3, &(0x7f0000007740)=""/166, 0xa6}, 0x2}], 0x9, 0x2, &(0x7f0000007a40)={0x0, 0x989680}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000007a80)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @remote}, 0xa4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x54f, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8c5fba361e93852a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x56, 0x0, &(0x7f00000003c0)=[@request_death={0x400c630e, 0x3, 0x4}], 0x0, 0x0, 0x0}) 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:49 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x11, @remote, 0x4e23, 0x1, 'sed\x00', 0x8, 0xe, 0x1}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x2, 0x1, 0x80, 0x3, 0x9}, 0x80, 0x5}) fallocate(r0, 0x8, 0x7, 0x100000001) fcntl$setlease(r0, 0x400, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x4, 0x1, 0xff, 0xa, 0x7, 0x7}, 0x20) 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e67d7c0000000000000000000000000000000000000000000000000000069000000e34d4996bb20a53e4d61da18cb99541fd6bbe2602c71991a8c82e29b7e29642fbba94a9f0b0e4a892601e23e9ec894d705880e59d2a37580441b3c2515f4b731430e2ddad1747a6114686ea6e3cb761e9c8830005b2fb5578d60bc8a1983df59000000000000000000"], &(0x7f0000000180)=0x8d) 15:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) [ 267.197977] binder: undelivered TRANSACTION_COMPLETE [ 267.217329] binder: undelivered TRANSACTION_ERROR: 29189 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x8) write$eventfd(r1, &(0x7f0000000080), 0x8) r2 = perf_event_open(&(0x7f0000000100)={0x2000000009, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x4440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) dup3(r0, r0, 0x0) 15:33:49 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4}}, &(0x7f0000000100)=0xe8) fcntl$setlease(r0, 0x400, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x7cfa816a, 0xa9}, {0x8}, {0x4, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffb08, 0x7f}, {0x7fffffff, 0x4}, {0x1ff, 0x61cd830}, {0x7, 0x81b}]}) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:49 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 267.240742] binder: BINDER_SET_CONTEXT_MGR already set [ 267.246530] binder: 14276:14282 ioctl 40046207 0 returned -16 [ 267.248054] binder: BINDER_SET_CONTEXT_MGR already set [ 267.264987] binder: 14274:14284 ioctl 40046207 0 returned -16 [ 267.295772] binder: 14276:14291 transaction failed 29189/-22, size 24-8 line 3117 [ 267.325739] binder: 14294:14299 got transaction to context manager from process owning it [ 267.336710] binder: 14276:14282 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 15:33:49 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="de9e16a7849d699064b148b06239995c33b63c3c06b4d83c26017590bcc6f741915699aa7d385d717659f27046af07e7674ab51f675b09adf94eb5756a13faa0a55f0abae08e609c3847667bec54868ef6d88c5b631ffad6eb15f976c86ca4589e6a6466023567edea113aafd6eea566c7490e06197e84716ce62acc2ad0424bee5760be496ec59c71fb755a80882f0b1743f32532a227a0d35b795504da9246c3fd6a2674b85903", 0xa8}, {&(0x7f00000000c0)="efb26f496b0a10a587db115d135c9b5daf849e60765383bc140011655d55db0613034ca8619be9a7a353aabde19853668179ff08fa4ef7b3cdf5f7af66ad684fda46c910b68490ccd53a3581b3bbfef6408f00a615618a0e6a3e69a539c3b260a3591c8355a6e33faad4898edbb16589c4594c3d97295689da1c1ac7edb25b06356650b0f9a7be943417be74c53de90a8c18cc96ff947264a148b47acba3dae7c146e700f0a7729ffd661f0db6bf9390331276139ebb18610353943c854fb1616488e965eb46b0cc6c0123c2e5d8eff129a4797118891cb03c8c74ba569e7a023e02853ab7", 0xe5}, {&(0x7f00000001c0)="daf42a5e1fad629fdee0d51024a7993fdae7a1641c1f3e7bc305f6b339d443101a1e932708dafb811cb98b246ae4c67719506dd33bfa3f3801d3f35fa9ef18ff30b6d9b8d883b43056821ca0d7edcbb76dca8b60de9b7a7571a54499f56915657aa14ae0800623808f529f37e032e0990d61006f559e2926354a142da0490f00b0dafe7dea30254d253d7adc9a73ca95ae253ea91838d338007356b8ad12837f70cfe6340b51a14929db8b5261099597a77f7f759f2ce680f38405bf64", 0xbd}, {&(0x7f0000000280)="e457a3fdfb6ddb6c71fc9e8fde8ebe19239bd0af72670743f26cacd34655f85567b82cd16287c4411d2b802af742df5b49a45e94383fcb5f38d8ab60d9633e3c18979521b4a453f06d51fc25df1779159d6955c6966613dd8c33676306fd34f4a2f9e2774f3118b4442faa4e51a339a9124f86801219", 0x76}, {&(0x7f0000000300)="0a5ff2ecb4f3cc9197d4de4021240c63d2153f4d0150d7499f7c7629d3f80eb0dfb128b71be0f0e910f22b333915cf794b378b5df2d43cda32fb4d946eec1333ff9c0b42f1d868751fbe13ccf1fcd9aad4aa8a8123062400", 0x58}, {&(0x7f0000000380)="d2c537385172e6db77841a6de859e320416c9e54b1007c5107a5c55175677e4ce174a07b90f2eb42d7f2d66bd1dc0133309e222710f42a1a20eeaf66b44dfdddc1aecd7ec68e7ff436c2ce68eead2aac60d7f1cc9c3eaa43fc9ddf", 0x5b}, {&(0x7f0000000400)="7f1984be8ef9a76edb79d2b6d71472071824d2224a5778056faaf44bc7df85cd1161c58f8c14365452eccd52b6777cbd770b8629f747f00247061f1f5e3847363667c601937d3d2d959695026fa5ab36126b58010b3d4ed17c777b0865305905522a7dbb24620ee80ccdada9be2bcb73fd9b238c72d7ef85efd6d0505abad88a750e", 0x82}, {&(0x7f00000004c0)="d8d56fff7160a003ee5a6d5a04278fef08ccbe2307f00868f2b8e2f2fa0e0c29fdac9e33547a992337dbd97a18de87f68eba6e12bdc9423b883874b9c1bbbbe110faf69a71ba1d0a40f3bf48ff5205f430ce2f2acc74b88ce3ccd14c56d25ac458722421ca6430ef6040b2cbe70de6fcf3bc416a1a6700577c8e2c5643e53310f23ff2f75756801d4fa257b78a6b2508b7d432c03d83674d7e94f27db851b8a33ddb7ec4d34bf0c1ac3728ca0dcea0fcfd11d5e431", 0xb5}], 0x8, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 267.341787] binder: 14294:14299 transaction failed 29201/-22, size 0-0 line 3108 [ 267.356709] binder: 14276:14282 unknown command 0 [ 267.380893] binder: 14276:14282 ioctl c0306201 200000c0 returned -22 [ 267.389242] binder: BINDER_SET_CONTEXT_MGR already set [ 267.402327] binder: 14294:14305 ioctl 40046207 0 returned -16 [ 267.408945] binder_alloc: 14294: binder_alloc_buf, no vma [ 267.409963] binder: BINDER_SET_CONTEXT_MGR already set [ 267.420000] binder: 14294:14299 transaction failed 29189/-3, size 0-0 line 3254 [ 267.420935] binder: 14276:14282 ioctl 40046207 0 returned -16 [ 267.427750] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.434380] binder: 14276:14307 transaction failed 29189/-22, size 24-8 line 3117 [ 267.439741] binder: undelivered TRANSACTION_ERROR: 29189 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:49 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) set_tid_address(&(0x7f0000000100)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) prctl$PR_SVE_SET_VL(0x32, 0x18258) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$getflags(r0, 0xb) 15:33:49 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_GET_CHILD_SUBREAPER(0x25) ftruncate(r0, 0x9) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r1 = dup(r0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) 15:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000000400000000000"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) [ 267.447869] binder: 14276:14282 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 267.462883] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.464464] binder: 14276:14282 unknown command 0 [ 267.468371] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.473397] binder: 14276:14282 ioctl c0306201 200000c0 returned -22 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) write$nbd(r3, &(0x7f0000000180)={0x67446698, 0x0, 0x4, 0x2, 0x1, "86f747c026520a0789619680b2d47d3e23765c508e04b581945623ec2529403cee4129f64a43d7655987ea37d23935eaef374b4bb206531b1496c8065d0ca9fb4cc10a4eccd43bf97334917704c0a2f759fe6721a0b125362260e3274924ce262af699ccbd6f82edf24f1989bf4c10973a76405ae43dd905baa413f7cff0fdcddeb4653ff9f527cb5515504951c9b33b6dc1848e0653e86a97a7022728b40662b9aa045379aaeac898891e05e792128255f1efb0e8b4687cb22e1fb4da3106b9"}, 0xd0) 15:33:49 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="8dc1331c33188dcfc2dd8055cb706cd6574fa4ebd796a66d6c96cad9a93324982b9fecfbd08b5b5c3181f7648e59e572ee0ddd6d3e18272f6a3b6dbd4d2001028be51947ce346f2c1cafa2ed6b54ef22800e9dad451f4e65a21de29e816e40d5724c98b08388c1f2bb43fefc1bd192b721a499fe0ba098aac075983059d21e5b9526ad5773dfb33106", 0x89}, {&(0x7f0000000140)="fb5676fa34068cbc9c1fc28b91c91af349f459873efacdc1655a09285ddfd22b3aeae548708d8c567d84e91f85362a43b08ad0c1622e9d6df57bd94985a426a0a299ca4ada50ec965ce5e2e606f7db3e9a9e3b1a0c2cc0bcf97e5a01515c0914313d8d33ea22c9c6d3e163269c165452853ef54c504c466d2a7a88188fa32c1820142effdcb83eef40952776dc8f8b2a14f63ce0d4f273305eae852c5c42661b33640bae0d39ea5eb0a861cb5ba3e198687db353cdf3356c5d46e5e653712b75263f", 0xc2}, {&(0x7f0000000240)="85f32571cce00d5f71293c11a22fc99d98ec25a3d3d9bc7860e624d90aa6b48e330854919483b88c2dfe1b075cc4520020f69ef33c6ec8d58cea50bc3c9ff0a8ebf8081bcc51d752d0fd15b15b9729c51c1372b990db04f6ab311b4bc58286de81df01d15799fb1fb53652488a8d3dfffaf8b15e35591cdfc3b991902f1ec23e1b8055103256570d58f017624ed1f315e81e8d9259f6b7ca387267aa75b28986f6a04e29e332f6d7dfb82188f62e013b83115408848a207f29efc9b03e88ff179cf769cf6e90824ae47ee55e9edc1d26e3870e9ad24a3284c973b2e8718b5d1a67f5ab9a5db9dc1652156b603018c5b1d37a4d84a9", 0xf5}], 0x3, &(0x7f0000000380)=[{0x50, 0x10b, 0x8, "1171a7a4591197632c0f4b1fc965a429a1263efe9ca2eae0c7f4ac7d7987194183c4bb4a40465242399058fda2d1547a2fd8dfedf1b4398491"}, {0x48, 0x0, 0x5, "b71a6bd90342493770bd3e2ad5c133c73c8af86e86f5be6969a17e173762c9589107f67e21d84ab3898b9bf4d376316389934954"}, {0x1010, 0x13f, 0x40000000000, "af8ab3e9ec72f335c3635df0f21bec6dd84805f9a1a4bbac55e58881e52bbb5b04fcf08354b705a8320b90d6aa0bf20b6e3e9e8ec7d98ed9f2a30f57a96ca05480ffeb2eb509ede4a8b716277184217f29e8b66d1379e3f47db8512960070e51248b988adb24ee2af55f0a39206646a9ed6303e77a994d2ee8d04cf8deff3db9d7cb0ce087a73bec2fbde8b5c47c4d24791fa51ee218e2bc65757832750adbebe95d4d798d71e27241779d88b95d6df463acb00b3ed9e08140b84c571a1cfa0a293f9ca69549eb7b9c01bf4a2fb86f7749a134afc9e7a4931d9858dfaf31cf0c996a1baf23876d2c6bc36ede07fd23bd30402928dbcac3f70c4bd6823e3ab8aee72d41ced836ec40c0bfb5a57cc8af4f03a0339fe1f48dc0869bb62dee08cc4805010d210d145d4b8859db33b2007781de8ada726255895c422e2b450cfc537c98ac3d99877838c4320f83d2113bfdcf72433e06ae0a1a1f3b00c56f1788e670501dfe9e8ca00c3deb3482899bc7b18403ad128f2b2a4ed15ceb37eaf141ef3dd7ee9f86f8cea2d2b9095075e7a8af7b42d7e3a8d8f076a97cb207cd34a9daeb01974589a5f1b3b40697f941a628f34d774678b56f380c402b1e8eef9d25be9d0d295e83868c5d89312242f91095fe78c6bd80d6b707f090d5ae9922763e038f40af465d51f025a330c08239a7a4de4c8520845d33e743b76db115b118985521600295a458b3aab0e8c1855a14cbafa57d9a8e1e5d0ded07ac99c2f8efb4386d8e2d75f4d2a93118b8f521abec57726dc61c3870eb66a66542067ab37d668a031cd35d51a4c5df1da6976e49f65e202fbe478dd5928bca2fa44ca1fbc6249fac5a262c2a78a23fde8398f1b88a03f6bfb855169f43484c612273b667b55622b680f430664630d380ddecc2e1f5e44d5e7b757d666087a89475c860f9e288fc307b2d0698b2c6d51f6192d97951552804d4b705580389e6306c58c15a49b57918d80fd154da5e6201a03657ae56e4ceac011010d81dd4bb455a7d1a21f94d4fd643d39e077ef2f3204dbe645d9fc4637daee6cd297533ac8b18a8f2f844838fc7aad39a11cf165a842f0a3acf0e868cb8ce100ed47d3835eb693519a0770ed6d8e41940236848888a096be4f2b15e2b810fc2dd3fdc773d4fb111d5d1dcbb630bd8e2cc5cf858921128b0e582b0a123bb4345fc381c68bdec697d19ac83af0d085dff15650c7fcc8bef5af11dc37573a34c8dc50e1f0662c6793ac6e0c0564bfbc1c67724b3a194d4bafda769682cd700405b6693bcd08d16ae0831cedd4961e60ab90f05df984cdaa3f89b7235df576f74b933b5a2cde511202601f10238c57821d35691f90fc7d165eee15c21fb397dc6eb9efc7f282fbfedd72049ef4521a59ba19709a7bfa6744fabf202c9a8c891ae267c76f8f59c70d3558c98077ab06414f470731b28e7b32312ea992038d0060e23890a49db5786a3bdfad8f4cd249ae22c949460dbc2660dab2f2a3675869d9565f0f82b59d85e38a28e5b31b4ee6b31551f2e2f021a6d0f334b7c75bb08e92c5c4000443c10ffc33e62fd1b05c383bdd9e954ecc618a5aeefd72d7833548aa3eb1e7272fa877825b153e0d2fbe301d1c28298b7511e1bbc9ae5b23732c41218f937638a5906d6da35b124cff22ff3d49ead0a589bee34ad1c51282dfe781f2d988fa190aac8f02644f36196d58cb295a0e4ab58e2ab69a911de8bf5f8f87ece38729ada4571e9441b5697b244b1ba71f751e52d53a80dabafb8162e3ca49d1b1807f7914f531b3db0a4d58ac6d944bfb4be2f3cce15fd02adceddee307e851c194d73fc0159540be46c334e9a51a916df786368acddf7bdfa6b50bcc27925abf205b1681b201de328cc2877854cca71346d6eeb1f7a261d9d002d1f94319c52fe7e9562dc8d3216022c90ff0582b3bdc76d0f169fc03f0afd0d7184a8be9194ccad678c21b282dbc88f4e3b4e0b39a4e40f87bbfb8490e409a4043ffd7df2c3af025f0ff5a0d02d916bc26e9b3e9cf5e5562fbb1c6b2f87c0b861c6f2ad7339d0d7c972158757b1c6c9d5d73a06d61f43fe9c215d36b74b1862b7d70978d8405baf03b2baa924a370f19fe241f4b945465c263b6e1a2be7eb85bec38a45f116d88a0db6ba695715dd7e965f8f22ae562a1de790dd2af714d922dab4e2354dfef36a61fc22df3524049ed016b4a99f5872ab4683c4d2be42ed408d2f87171794b5dbf88b976bcacedd445b95dd6814c642fcac700f8f70c8d62b96d13f17faf1edaa6664878f4d7ba93507a7d0f84690c2719abd4a90b144009b4dc8cf0b90d646d1b7ea6d2563fd04d5013ea842a0be28600d424f87c02d0bf2c5c4c2eca19f94dc3ae0945abd337264d5b92d69af47e3dd31612962af04790de17d76856af935e59b6bcc1c2f6de9bed36789766b4d2224c3908bbb364689f441082cc5aac13eb57196a8d65b699ff935b3ba0b4a9bc3f46754d1d665bf892329d2a6530db37ca9e6804244f561991054b1f37d1990c3e3e2a9a4ef16746706ab94d8af5047e6ccae9258ce513b083bb8af4094cbeee29fc244a78c8946039093c90f3377d8cb0c858bf4ad17da9984f3d2e041890ee69a094b34a5177a86f472983a7b842dce3a8dfcc32bcd206dabb55daa84d7afb01ce734798592fa4a8724372555145fdd356e9b169e9c96b134eae71a79226f4faa3963c865e25e695492c4b7ceed93c4d9c929636c6be8fa33694b108c5dd50c03c7595aba785a349f8469ebcabcadc678400eef5c78b230090de6ff2942316644fc3a2c0b262d7b5a427b261b0a37fa8ab1e5420e97fed6d730901365698ed0c5716d1a39ba650da4393230adcef99d22035cf4a104f62a4c91c5104349f209ab6503ec71cbb51afbd7475e67b6e9678c56f831fca0dd3d3ddde69baecf934582ee0cc80f19699ebf12c12819d4279de6517cedcc30f938a272d5bec878be34f248f3a62095035f57487d17d2576198f351c4b48bbaf4f81d5302bae8d2ae4ab6ca6a27bb3fa642475f9893f882ca1912190a14aea997991b9ed8e1c5ad870a24b9326dd5e189d73f6371fe310dd74b4735d1ce9233c0a3c4ea702ccb95308f7149d8b9d33441139104a9630a7e4b8073674fe9a83622903c465462325a7e1f60368a9ea0a1794d7dd2dcf2900089021d2f6a6090082a037d98eabec7da329808cc006d023ca2f09c9cf27cb505fd6a0ba605c7d86d2ccae25d669cdff4b2d7cf832dbfa4a57d040cc9074a7a3c7ed8a41731201bdfb473ed6361bdcab4d90e2b1ce2b4674229d27e450aab456f0e49b61897e22479b963d372cdcc73b4971b053a2253538bba1d61741929cb7bf4681b738a379b812e13b3093cfb30621b447b9df5b3cbff22fba3b22bb20a2fb87bf948233978f748e1faf79f2c5ee76469db56c0979df5ad272ce5ad0c589d799490b0ade085af7a0eca1144b3873ff37254926976e50cbab4165c24ebb0f8636a1c6d0d0386f3a2edc9eeaf2d3ab92e6868a7e1d47ba280a9b5746caa769138b48dfc4d283a3752ae3764ec56140050333b80f7cf43ef717f954150b8ab5b9e0c61322f6cd9eb36d55ae7ac7fda8a1101316501c04032a1cb4f4b4931588dbb2a17dd728a3756d58711f2c9318daca2c3d5de433d46495b0fb5698a7cc801ae64bf115ef04b651801020e596f14d340d3ba2333d19c89865d9c06a37a9b6c52ba1f622fc3574ab606ae26855c72be85a0ce1f60fc03509c29eafa68a3b21acaa79b74cef153a93d5fd8894dd9829d753b6905103253e29507f4bc20b90186854aba58448cc8972d509a02a3758417d26bdc8356cd75880ed2574828160be9d8e7c31847f531da05d80819170dbd5f431a358794c8432d36e94c6181a8b004d2408172bb8f7e133b9c488e553258fe9c5d6dc0692209c40e9111a9631e63ec4b97690d4f8a0303923669056e1c4ddceb0f553aeb03a11afec8da034bb7fd250a8469814ea9f662c3de12a3ae7b8cd7ac1c61a27c132cb1a45359eee55a3217afc0f3403fd446714cd8a7a0275157fa99b730bf7f612ced56b49df48b0e74123e4b79c0eb0b3ec85469ba03a3836f4e43213d4d21d468d44fc2d0b671ff99f19729b7ff3f7cdcb8c38a8d4bb832588c28f5c47d2835347d7bbba4e235934990e62b5300e734ac0c45697ac189936d99a18a85dcab971882b48ec5b42b6ff1797feedf67bbf14fa49bc2db93435979262e5484b8cc13f553d5a88a33cb223d75db3d6258c00dbf8b0e30e1ec8ee08f146dae97420a59842c3a6881f69aadd0d1922c0d1ba0eed284d3d8a3565deb5e575ea02ad3833597bdb8a8928ef01f15b147077d633d72f64307c8b78a3185712c8e722c4a56ca4c770c78527f4e240dc48b3a18aecbb74a7e5fdcb74644fa5a824beb41ea0f82c3b8f0e11af759d3adf507fbe9602c584c63c3b19c4a746599861370b17a802b3ee094a3b50434fc102b785bffb0d7582b3e5b61b49ae8feac3cb56d08fb3d86c537c779f317c8803306f0e807236d739b4d7e7ecafe5249678963a14f87d284be3269e2701d3c25ffbf53c1ecb5a003e2ce8863b54a109d2e76194d0d3f63be41ebce86bd4337f67343cec9c852aa1fbd32b3ae32d80d4dc0b2b14542728b13ef559303ed01a59066145f2806dbcfd2f0b27cd56b256c1ec5a23d6eb063e91676e1562a20cb6d68d4363e22b972c8b4109c96c0c1aa9bae7f58cb7c8f112c819f2d2d542a3933e18a446d0fe5e8dad4dd88135406a7b1a622a921f9fa82d1d57b581071861b64a8e6a61ab4f89175138556ee5ae78914a7b098045c35d463cd734b2b9db4e701728ba30b7df1ff24768d01bea747637fc0d3bd47dafe7bc3030ad091b54f9af41a165bfca8ad47cf83f8110f6e1a1b681f7bcdbe21a786849961f2011b73550dc75ca6d5dd613a92104c129b24e513a1ac7343e1910e0d8a09d831905919264aaa8fc6a0d14d4dbb3f7605755bd276758f829c399246f088de9c39ed5891686c56dda7de05462aa7372035bf0dc476941329089fe505b273e754a441418996945d9844901cd56b5439bb12a432be6425e68f028ac3da8686bd08e64520f48dccd8245b962ed4501fec0cae5d0e41b819c2f6f8f20451f0415e0018f1954aa0548177b4d62e149b71a3594f31b3c7e306c2ff454745877bc60dd13eff81e8d8a92959f7a081c072475a117a13e228e66d739e191638c747ca70ed997a102695878c855ff76088c9320e8269ad49fc94944e9d61463e93bcc9933ce8f32a6673ef161582c8a781d4ded0fd24a39e66e7bba64e70168658e166d0f1e1b650281910b1d7eb9fe041e666b547349245f30125f6e64433a8cc8ad380763e7f69729bf6a996738440b5b464232b1bb7b856e4b1d3e041482d8c18ae656989172f2b019b94d37dca8b9aa5b555b5dd07f68b9a34c3d3b1929e5c392a962589996176f65b992a5dcc531585a543efbb9578f801da8c8bd5a0d8a15f640e41a0b14b0fe74880d75520f9df20c231107dee5cbab6bf1924b5238792fdb1e885b079527f344cdbf93e6700b75030d7a967ffc02c8487288125732f93ecf4e7873ecf3d1b5bc7f7b70b28fc20a11ca8f801ee80b7d83baa36a759f1e3599eae6793da3365603d7af4b8163fcf08cf4fe92a43dbb47a1aa0ae1adffd7ce4a2511c28c258866859464a5aed07867c58f3d2b088fdb3a8dae46f1fc59d5b05ea7086d9e9e2dfe71c3c52e3ece0f09c0ecb9286ad9985dbbb727654"}, {0x10, 0x0, 0x8}, {0x30, 0x11, 0x5, "29fb7805adfc42ccad0ed7b40fd99925ae8d864536211dd644c3897482df"}, {0x98, 0x11f, 0x2, "de3564f012449e64427ddd1327e06458b83369dae6034896844300ae76c1a4fa7289773b26ab520816d651be78f24f14575eb4d1f9f3e6366dfb29e238b7a41bdcde840142863e0e38bdef87f34ef85cab8318534880b3d80195e54d10f6351ebdefaa0f7aec61001dc1e99639210c5ab35f0dd66d8d54fdf8fd9847a2176b233cbf3cfd9e"}, {0xb8, 0x84, 0x100000001, "73974e9c9f70c33eb3cc2f0bea3ef3dbf85f6092b44f51ec468d4cc0ae933b345f44667f4e678e146dda3323e5777336ba9d99217f9cba2f4ab486b1130d75f1d0f53efb1500a50b4beab9cc9d12c909fb7e8f3c768bceef1adc2e56d616537e85fa769551bf00dbf6c1198b292343cc2b07bc1d4f6abe98efdf1b045808ce951c51baa4a6c6a8c2905d3595690b923839f97c9766feb2ae000d5a2fd9775d38cdf05302"}], 0x1238}, 0x20000000) fcntl$setlease(r0, 0x400, 0x1) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 267.517939] binder_alloc: 14311: binder_alloc_buf, no vma [ 267.528807] binder: BINDER_SET_CONTEXT_MGR already set [ 267.535518] binder: 14311:14317 transaction failed 29189/-3, size 0-0 line 3254 [ 267.549209] binder: 14313:14320 ioctl 40046207 0 returned -16 15:33:49 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000500)=""/103) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fsync(r1) fcntl$setlease(r1, 0x400, 0x0) geteuid() ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000000)=""/240) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="20002dbd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="b000020038000100240001006e6f7469668c14d8f18870656572735f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000800030006000000040004000815a0ead43b78faa3f62773ac1152056b", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040003000000"], 0x7}, 0x1, 0x0, 0x0, 0x10}, 0x44011) getsockname$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, &(0x7f0000000380)=0x10) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x5000000000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x202000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) dup3(r0, r1, 0x0) 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 267.598733] binder: BINDER_SET_CONTEXT_MGR already set [ 267.608926] binder: 14313:14330 ioctl 40046207 0 returned -16 [ 267.618411] binder: BINDER_SET_CONTEXT_MGR already set [ 267.623849] binder_alloc: binder_alloc_mmap_handler: 14311 20001000-20004000 already mapped failed -16 [ 267.664369] binder_alloc: 14311: binder_alloc_buf, no vma [ 267.671067] binder: 14311:14332 transaction failed 29189/-3, size 0-0 line 3254 [ 267.675857] binder_alloc: 14311: binder_alloc_buf, no vma [ 267.684311] binder: release 14311:14317 transaction 532 out, still active [ 267.692225] binder: 14311:14327 ioctl 40046207 0 returned -16 [ 267.700925] binder: unexpected work type, 4, not freed [ 267.707725] binder_alloc: 14311: binder_alloc_buf, no vma 15:33:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8) 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 267.713564] binder: 14311:14317 transaction failed 29189/-3, size 24-8 line 3254 [ 267.724804] binder: 14313:14320 transaction failed 29189/-3, size 0-0 line 3254 [ 267.732633] binder: undelivered TRANSACTION_COMPLETE [ 267.740507] binder: undelivered TRANSACTION_ERROR: 29189 15:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffd) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'eql\x00', {0x2, 0x4e20, @rand_addr=0x100000000}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000100)={0x4, {{0xa, 0x4e23, 0x8, @remote, 0xffffffffffffffe5}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x24}, 0x100000001}}}, 0x108) 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) keyctl$set_timeout(0xf, r3, 0x6) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x6, 0x9, 0x7, 0xffff, 0x0, 0x3ff, 0x2000, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0xfffffffeffffffff, 0x4, 0x2, 0x80000001, 0x2, 0x1, 0x0, 0x91, 0xd44, 0x9, 0x4, 0x1000, 0x6, 0x0, 0x5, 0x7, 0x1, 0x1f, 0x3, 0x1000, 0xfffffffffffffffd, 0x20ed, 0x8, 0x0, 0xaed1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x4}, 0x22010, 0xfa, 0x1000, 0x7, 0x7, 0x5, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, r1, 0x2) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 267.771691] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.799027] binder: BINDER_SET_CONTEXT_MGR already set 15:33:49 executing program 3: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) epoll_create(0x100000001) 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)) dup3(r0, r1, 0x0) 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) [ 267.829927] binder: 14359:14364 ioctl 40046207 0 returned -16 [ 267.831318] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.849157] binder: 14359:14372 transaction failed 29189/-22, size 24-8 line 3117 [ 267.873696] binder: undelivered TRANSACTION_ERROR: 29189 15:33:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:49 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)={{0x10b, 0x20, 0xffffffffffff8452, 0x17f, 0x53, 0x4, 0x3aa, 0xfffffffffffffffe}, "5143d4ebad423c998a76ff6b1b02f544cdc419aeb4a97b205aecd9a712a26a2711afc8a4f8d845de50d1ee5d578f5b21920417b5e3aa354753cf181f55cef5d6caba3c42ca8c2c87a8ede2380c981c5e6ed5371fa2e01167473c1f5709bc018c08c8bf0ae631e2347c1e341a14be7ab0cd5abf32435280915c3eb1bf745312ea8a2153bac098acf8b6aa1ded7c00b93289f53e464c2edfb33f5feeefea888f9516d0a9be7dbbce3ad58c40be2b24e204f697e8d88b40974dce38791b0e87d05693a4cda6a865bc237567544cd156c36a77a0c95c92e5c1fbfd7477bc0a7fe7bc0967ee5bda6c92fdda813269a8"}, 0x10d) sync_file_range(r1, 0x1ff, 0x200, 0x2) 15:33:49 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0xc3, 0x4) [ 267.890339] binder: 14359:14364 got transaction to invalid handle [ 267.896966] binder: 14359:14364 transaction failed 29201/-22, size 0-0 line 3117 [ 267.911486] binder: send failed reply for transaction 532, target dead [ 267.924026] binder: send failed reply for transaction 536 to 14313:14330 [ 267.926165] binder: 14359:14364 ioctl 40086607 20000040 returned -22 [ 267.950925] binder: undelivered TRANSACTION_COMPLETE [ 267.972473] binder_alloc: binder_alloc_mmap_handler: 14359 20001000-20004000 already mapped failed -16 [ 267.976001] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.007507] binder_alloc: 14359: binder_alloc_buf, no vma [ 268.017232] binder: 14359:14372 transaction failed 29189/-3, size 24-8 line 3254 [ 268.026472] binder: 14359:14364 got transaction to invalid handle [ 268.033081] binder: 14359:14372 ioctl 40086607 20000040 returned -22 [ 268.042468] binder: 14359:14364 transaction failed 29201/-22, size 0-0 line 3117 [ 268.043453] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.063067] binder: undelivered TRANSACTION_ERROR: 29201 15:33:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000000, 0x20011, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0x54a) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) r3 = mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffe2f, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x18, 0x20, &(0x7f0000000380)=[@flat={0x736a2a85, 0x0, r3, 0x1}], &(0x7f0000000440)=[0x28, 0x0, 0x28, 0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x2000003) fcntl$setlease(r0, 0x400, 0x3) 15:33:50 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x371, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sendfile(r2, r2, &(0x7f0000000080), 0xfffffffffffffffe) fcntl$setown(r0, 0x8, r3) dup3(r0, r1, 0x0) 15:33:50 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 268.068629] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.074300] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.098806] binder: 14408:14411 got transaction to context manager from process owning it [ 268.110478] binder: BINDER_SET_CONTEXT_MGR already set 15:33:50 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) symlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000140)='./file0\x00') symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 15:33:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)={0x2000}) r3 = dup3(r1, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) [ 268.124647] binder: 14414:14418 ioctl 40046207 0 returned -16 [ 268.139603] binder: 14408:14411 transaction failed 29201/-22, size 0-0 line 3108 [ 268.154543] binder: 14414:14418 got transaction to invalid handle 15:33:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setlease(r0, 0x400, 0x1) timer_create(0x4, &(0x7f0000000000)={0x0, 0x23, 0x5}, &(0x7f0000000040)=0x0) timer_gettime(r1, &(0x7f0000000080)) 15:33:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 268.181639] binder: BINDER_SET_CONTEXT_MGR already set [ 268.193120] binder: 14414:14418 transaction failed 29201/-22, size 24-32 line 3117 [ 268.206313] binder: 14408:14431 ioctl 40046207 0 returned -16 [ 268.211708] binder: 14414:14434 got transaction to invalid handle [ 268.222538] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.244170] binder: 14414:14434 transaction failed 29201/-22, size 0-0 line 3117 [ 268.279608] binder_alloc: binder_alloc_mmap_handler: 14414 20001000-20004000 already mapped failed -16 15:33:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:50 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0xa, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socketpair(0xf, 0x1, 0xfffffffffffffffe, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa}) dup3(r0, r1, 0x0) 15:33:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) fadvise64(r1, 0x0, 0x8, 0x2fa6c4676a0dff82) 15:33:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 268.289587] binder: 14414:14434 got transaction to invalid handle [ 268.296740] binder: 14414:14434 transaction failed 29201/-22, size 24-32 line 3117 [ 268.304617] binder: 14414:14418 got transaction to invalid handle [ 268.310962] binder: 14414:14418 transaction failed 29201/-22, size 0-0 line 3117 [ 268.311404] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.324106] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.329605] binder: undelivered TRANSACTION_ERROR: 29201 15:33:50 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000ba0971cf7ab6dc05e096bad5d25852a500000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 15:33:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x200, 0x5, 0x10000, 0x8, 0x3, 0x6, 0x9, 0x24c, 0x38, 0x1f, 0x56, 0x0, 0x20, 0x2, 0x80000001}, [{0x7, 0x0, 0xa38, 0x8, 0x4, 0x9a, 0x2, 0x2}, {0x6, 0x3f, 0x2, 0x0, 0x6, 0x1, 0x1ff, 0x8282}], "c479555c5b1f2167a2e087c3772815c698c94a75a09e1213e9906763f03cafcf8f93f75294094910184eed9d831c2a0c284d54ab0b01667e59488e2ca57f0369ad48f38085057c86878d0306f2b98f7eac2caec0b6c1faef1dfedd878b", [[], [], [], [], [], [], []]}, 0x7d5) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040027a77000fbdbdf250d00000034000300080003000200000014000600fe80000000000000000000000000002a1400020076657468305f746f5f626f6e6400000048000100080001000a0000000800050003000000080008002d890000080001000a0000000c0006006e6f6e650000000008000200890000000c0001000a000000080001000a00000028000200140001007f000001000000000000000000000000080003000200000008000400000000804000010008000b0073697000080004004e2300000800020002000000080008001f00000014000300ac1414bb0000000040000000000000000800050002000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 15:33:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 268.346972] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.351657] binder: 14450:14455 BC_FREE_BUFFER u0000000000000000 no match 15:33:50 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 268.409946] binder: 14450:14463 unknown command 0 [ 268.417096] binder: BINDER_SET_CONTEXT_MGR already set [ 268.435498] binder: 14450:14463 ioctl c0306201 20000000 returned -22 [ 268.445875] binder: 14460:14465 ioctl 40046207 0 returned -16 15:33:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x4) [ 268.454245] binder: 14450:14475 got transaction to invalid handle [ 268.460946] binder: BINDER_SET_CONTEXT_MGR already set [ 268.464251] binder: 14450:14475 transaction failed 29201/-22, size 0-0 line 3117 [ 268.484131] binder: 14460:14476 ioctl 40046207 0 returned -16 [ 268.506463] binder: release 14460:14465 transaction 555 out, still active [ 268.516954] binder: undelivered TRANSACTION_COMPLETE [ 268.528175] binder: release 14460:14465 transaction 554 out, still active [ 268.538865] binder: undelivered TRANSACTION_COMPLETE [ 269.150807] binder_alloc: binder_alloc_mmap_handler: 14450 20001000-20004000 already mapped failed -16 [ 269.160660] binder: BINDER_SET_CONTEXT_MGR already set [ 269.166051] binder: 14450:14475 ioctl 40046207 0 returned -16 [ 269.166068] binder: 14450:14463 BC_FREE_BUFFER u0000000000000000 no match [ 269.172454] binder: 14450:14486 unknown command 0 [ 269.183969] binder: 14450:14486 ioctl c0306201 20000000 returned -22 [ 269.190692] binder: 14450:14463 got transaction to invalid handle 15:33:51 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r2, 0x0) 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0x2}) ioctl(r1, 0x0, &(0x7f0000000000)="fbab79463c3cde0e76c80c8b") dup3(r0, r1, 0x0) 15:33:51 executing program 3: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 15:33:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 269.191121] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.197004] binder: 14450:14463 transaction failed 29201/-22, size 0-0 line 3117 [ 269.202676] binder: send failed reply for transaction 554, target dead [ 269.216922] binder: send failed reply for transaction 555, target dead [ 269.232717] binder: undelivered TRANSACTION_ERROR: 29201 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r2, 0x0) 15:33:51 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8, 0x0, 0xfb6, 0x1f, 0x0, 0x1, 0x8, 0xa, 0x5, 0x101, 0x800, 0xfffffffffffffffa, 0x81, 0x8001, 0x1, 0x7a1, 0x5, 0x8, 0x7fffffff, 0xf10, 0x6, 0x9, 0x81, 0x7a4, 0x6, 0x7, 0xff, 0x0, 0x0, 0x4, 0x9, 0x1ff, 0x4, 0xfffffffffffffffc, 0x3, 0x67ff, 0x0, 0x94, 0x2, @perf_bp={&(0x7f0000000040), 0x44320b3c0f3d02c0}, 0x1044, 0x3000000000000, 0x1, 0x7, 0xb11, 0x0, 0xffffffffffffff00}, r0, 0x10, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r2, 0xffffffffffffffff, 0x0) 15:33:51 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x20) write$P9_RSTATFS(r0, &(0x7f0000000080)={0x43, 0x9, 0x2, {0x3, 0x0, 0x0, 0x100d, 0x0, 0x8, 0x8, 0x5, 0x1}}, 0x43) fcntl$setlease(r0, 0x400, 0x7) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = getegid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() setgroups(0x8, &(0x7f0000000580)=[r1, r2, r3, r4, r5, r6, r7, r8]) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x2, 0x70000000, 0x3, 0x314f}, {0xd9f5, 0x824, 0x4, 0x2}]}) fcntl$setlease(r0, 0x400, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28}, 0x10) [ 269.245030] binder: 14490:14494 got transaction to context manager from process owning it [ 269.255952] binder_alloc: 14493: binder_alloc_buf size 1196268651020320 failed, no address space [ 269.279813] binder: 14490:14494 transaction failed 29201/-22, size 0-0 line 3108 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 269.308915] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 269.318217] binder: 14493:14507 got transaction to invalid handle [ 269.334510] binder: 14493:14507 transaction failed 29201/-22, size 0-0 line 3117 [ 269.343500] binder: BINDER_SET_CONTEXT_MGR already set [ 269.349162] binder: 14493:14498 transaction failed 29201/-28, size 562949953421312-633318697599008 line 3254 15:33:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r2, 0x0) [ 269.371359] binder: 14490:14513 ioctl 40046207 0 returned -16 [ 269.393379] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.403239] binder_alloc: binder_alloc_mmap_handler: 14493 20001000-20004000 already mapped failed -16 15:33:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x18002, 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000440)=""/211) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f00000005c0)=0x1ff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800220}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="64010000", @ANYRES16=r4, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/180) rt_sigprocmask(0x2, &(0x7f0000000540)={0x8}, &(0x7f0000000580), 0x8) dup3(r0, r1, 0x0) 15:33:51 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x100000001, {{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x1f}, 0x8}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, 0x108) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x5) 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:51 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000180)="a52cb0ac1bc592f9b7e720b9e0b4164718b769458aaa26e8e641442d3949aea07595db15ac2b735093c13825a02262cd0c6c040a9777784e13b5c06d74f532b64203d07118c30ee6dca5d572043a415b974856771d632c925d6bf0d85599b247f54482bed3") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x410004, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) 15:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x600, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2, 0x13, 0x3, 0x7, 0x22b, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x2}, @sadb_x_sec_ctx={0x201, 0x18, 0x800, 0x7, 0x1000, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_lifetime={0x4, 0x3, 0x0, 0x8, 0x80000000, 0xffffffffffffff80}, @sadb_x_sec_ctx={0x17, 0x18, 0x3ff, 0x6, 0xaf, "fffa4062fd9f682884460fd40bc352fcc59b32a664cda21c8491d1bcfea46990b33d06b47da4c7bf77fdbb74e4085e6269a73aefc65165be832c4682e8e448baa7e40c4d2948bdb8a41d6d7ac265470f675a06ab62dda51855e05db2de138525734b6c5e67f71e88422d7bfe45e5e653f5b20407f3d87be6058fc46b4399a1c05b7dc9463383c77707c2c698f51e1ccac516eef93c2d4e8a5eff60a2bde4b8e451ee186313a015ce05eebe5f3078e3"}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x0, 0x80000000, {0x6, 0x6c, 0x5, 0x8, 0x0, 0x1000, 0x0, @in6=@mcast1, @in=@rand_addr=0x1}}, @sadb_x_sa2={0x2, 0x13, 0x80000001, 0x0, 0x0, 0x70bd2b, 0x3504}]}, 0x1158}}, 0x4011) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000001a9d72eed4adf03c210000000900000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 15:33:51 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r1, 0x0) [ 269.428611] binder: BINDER_SET_CONTEXT_MGR already set [ 269.438801] binder: 14493:14523 ioctl 40046207 0 returned -16 [ 269.445328] binder_alloc: 14493: binder_alloc_buf, no vma [ 269.449925] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.451353] binder: 14493:14498 transaction failed 29189/-3, size 562949953421312-633318697599008 line 3254 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:51 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r1, 0x0) [ 269.486004] binder_alloc: 14532: binder_alloc_buf, no vma [ 269.495108] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.504742] binder: 14531:14536 ioctl 1279 20000300 returned -22 [ 269.511824] binder: 14532:14537 transaction failed 29189/-3, size 0-0 line 3254 [ 269.522460] binder: undelivered TRANSACTION_ERROR: 29201 15:33:51 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x3) fcntl$setlease(r0, 0x400, 0x1) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') 15:33:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 269.530967] audit: type=1400 audit(1553700831.482:52): avc: denied { write } for pid=14528 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 269.561872] binder_alloc: binder_alloc_mmap_handler: 14532 20001000-20004000 already mapped failed -16 [ 269.578801] binder: 14531:14556 ioctl 1279 20000300 returned -22 15:33:51 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x105, 0x1000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) syncfs(r1) r3 = eventfd2(0x100, 0x80001) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) pipe2(&(0x7f0000007b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmmsg$unix(r7, &(0x7f0000000340)=[{&(0x7f0000007b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="c947bbce48039fd6840eddcd7ea58fedc38ed39d", 0x14}, {&(0x7f0000000180)="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", 0xfffffffffffffe6c}], 0x2, &(0x7f00000004c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r8]}, @rights={0x0, 0x1, 0x1, [r3, r3, r2, r0, r7, r3, r8, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x0, 0x1, 0x1, [r0, r8, r2, r7, r2, r7, r1, r0, r2]}], 0xb8}], 0x49249249249249e, 0x10000000000) fadvise64(r1, 0x0, 0x1, 0x5) readahead(r0, 0x358b0681, 0xffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 269.607345] binder: BINDER_SET_CONTEXT_MGR already set [ 269.612887] binder: 14532:14537 ioctl 40046207 0 returned -16 [ 269.637981] binder_alloc: 14532: binder_alloc_buf, no vma 15:33:51 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:51 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r1, 0x0) 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 269.653606] binder: 14532:14549 got transaction to invalid handle [ 269.654765] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.671389] binder: send failed reply for transaction 564 to 14532:14537 [ 269.674062] binder: 14532:14549 transaction failed 29201/-22, size 0-0 line 3117 [ 269.678271] binder: undelivered TRANSACTION_COMPLETE [ 269.678281] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.691125] binder: 14568:14569 got transaction to context manager from process owning it [ 269.707230] binder: 14532:14564 transaction failed 29189/-3, size 24-8 line 3254 [ 269.727486] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.739533] binder: 14568:14569 transaction failed 29201/-22, size 0-0 line 3108 15:33:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x593, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:51 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'\x00', {0x2, 0x4e21, @remote}}) lseek(r0, 0x0, 0x4) fcntl$setlease(r0, 0x400, 0x2) pipe2(&(0x7f00000000c0), 0x4800) fcntl$setlease(r0, 0x400, 0x1) pread64(r0, &(0x7f0000000000)=""/12, 0xc, 0x0) ioctl$sock_ifreq(r0, 0x895f, &(0x7f0000000080)={'veth1_to_bond\x00', @ifru_names='batadv0\x00'}) 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:51 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) [ 269.756508] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.772522] binder: BINDER_SET_CONTEXT_MGR already set [ 269.779871] binder: 14568:14584 ioctl 40046207 0 returned -16 [ 269.786912] binder_alloc: 14568: binder_alloc_buf, no vma [ 269.794566] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.800275] binder: 14568:14569 transaction failed 29189/-3, size 0-0 line 3254 15:33:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1ed) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:51 executing program 3: accept4$packet(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0x1b5, 0x800) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) timerfd_create(0x4, 0x80000) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x169a02, 0x0) socketpair(0x1e, 0x807, 0x85, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="150000007f00ff8000000008003950323034302e75"], 0x15) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@multicast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in6=@initdev}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) [ 269.817889] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.818319] binder: 14590:14591 unknown command 0 [ 269.835886] binder: 14590:14591 ioctl c0306201 20000000 returned -22 [ 269.852522] binder_alloc: 14590: binder_alloc_buf, no vma 15:33:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001600)='cpuacct.usage_sys\x00', 0x0, 0x0) getpeername$packet(r2, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001680)=0x14) r3 = epoll_create1(0x0) r4 = dup3(r3, r1, 0x80000) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x1, 0x0) dup3(r0, r1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 15:33:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) [ 269.885455] binder: BINDER_SET_CONTEXT_MGR already set [ 269.901155] binder: 14590:14591 transaction failed 29189/-3, size 0-0 line 3254 [ 269.907834] binder: 14599:14601 ioctl 40046207 0 returned -16 15:33:51 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 269.939913] binder_alloc: binder_alloc_mmap_handler: 14590 20001000-20004000 already mapped failed -16 [ 269.961982] binder_alloc: 14590: binder_alloc_buf, no vma [ 269.975713] binder: 14599:14614 transaction failed 29189/-3, size 0-0 line 3254 [ 269.984973] binder: BINDER_SET_CONTEXT_MGR already set [ 269.995888] binder: 14590:14591 ioctl 40046207 0 returned -16 [ 270.007733] binder_alloc: 14590: binder_alloc_buf, no vma [ 270.011692] binder: BINDER_SET_CONTEXT_MGR already set [ 270.018757] binder: 14599:14614 ioctl 40046207 0 returned -16 [ 270.020703] binder: 14590:14624 transaction failed 29189/-3, size 24-8 line 3254 [ 270.025434] binder_alloc: 14590: binder_alloc_buf, no vma [ 270.038341] binder: 14599:14601 transaction failed 29189/-3, size 0-0 line 3254 15:33:52 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @rand_addr=0x6}, {0x307, @dev={[], 0x1b}}, 0x50, {0x2, 0x4e21, @multicast2}, 'bcsh0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000280)={0x2, 0x3, 0x8, 0xdf97, 0xdb, 0x8}) 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4404008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 270.041381] binder: 14590:14591 got transaction to invalid handle [ 270.052242] binder: 14590:14591 transaction failed 29201/-22, size 0-0 line 3117 [ 270.052777] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.065728] binder: undelivered TRANSACTION_ERROR: 29201 15:33:52 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xdfbc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x440000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x97, {{0x2, 0x4e22, @local}}}, 0x88) r3 = epoll_create1(0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'nlmon0\x00', {0x2, 0x4e21, @multicast2}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 270.086897] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.109171] binder: BINDER_SET_CONTEXT_MGR already set [ 270.123793] binder: 14628:14637 ioctl 40046207 0 returned -16 [ 270.124824] binder: BINDER_SET_CONTEXT_MGR already set 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x4) fcntl$setpipe(r0, 0x407, 0x352) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x12) [ 270.149860] binder: 14629:14639 ioctl 40046207 0 returned -16 [ 270.152117] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.155869] binder: BINDER_SET_CONTEXT_MGR already set [ 270.167152] binder: 14635:14641 ioctl 40046207 0 returned -16 [ 270.171244] binder_alloc: 14590: binder_alloc_buf, no vma [ 270.182565] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.189424] binder: 14628:14648 transaction failed 29189/-3, size 562949953421312-633318697599008 line 3254 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0xf, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x27354162}, [@generic={0x7f, 0xfffffffffffffffb, 0x44, 0xf5f, 0xa25}, @map={0x18, 0x9, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff7fff}, @map={0x18, 0xb}, @generic={0x4, 0x1, 0x3, 0x3, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @alu={0x0, 0x40, 0xf, 0xb, 0x6, 0xffffffffffffffe0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000a40)='GPL\x00', 0xc7, 0xb5, &(0x7f0000000a80)=""/181, 0x41f00, 0x1, [], 0x0, 0xb}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r3, 0x50, &(0x7f0000000cc0)}, 0x10) getrlimit(0xc, &(0x7f0000000c80)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x83a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) fsync(r3) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x2, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}}}, 0x88) dup3(r0, r1, 0x2) 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 270.199879] binder_alloc: 14590: binder_alloc_buf, no vma [ 270.204205] binder: 14635:14652 ioctl 40046205 dfbc returned -22 [ 270.217715] binder: 14629:14649 transaction failed 29189/-3, size 24-8 line 3254 [ 270.225655] binder: 14628:14637 got transaction to invalid handle [ 270.232206] binder: 14635:14641 transaction failed 29189/-22, size 0-0 line 3117 [ 270.236184] binder: send failed reply for transaction 574 to 14590:14591 [ 270.247064] binder: 14628:14637 transaction failed 29201/-22, size 0-0 line 3117 [ 270.251914] binder: 14635:14641 ioctl 40046205 dfbc returned -22 [ 270.261707] binder_alloc: 14635: binder_alloc_buf, no vma [ 270.270630] binder_alloc: binder_alloc_mmap_handler: 14629 20001000-20004000 already mapped failed -16 [ 270.279635] binder: 14635:14652 transaction failed 29189/-3, size 0-0 line 3254 [ 270.280482] binder: undelivered TRANSACTION_COMPLETE 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = timerfd_create(0xc, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r4 = dup3(r0, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$RTC_UIE_ON(r1, 0x7003) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={r5, @rand_addr=0x81, @broadcast}, 0xc) 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = getegid() socket$nl_route(0x10, 0x3, 0x0) chown(&(0x7f0000000000)='./file0\x00', r1, r2) fcntl$setlease(r0, 0x400, 0x1) [ 270.300348] binder: BINDER_SET_CONTEXT_MGR already set [ 270.305737] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.312865] binder: 14629:14639 ioctl 40046207 0 returned -16 [ 270.321389] binder_alloc: 14635: binder_alloc_buf, no vma [ 270.336653] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.344773] binder: 14629:14663 transaction failed 29189/-3, size 24-8 line 3254 [ 270.364948] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.383131] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.388641] binder: undelivered TRANSACTION_ERROR: 29189 15:33:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00'}, 0x30) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r2}) r3 = dup3(r1, r0, 0x80000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)="8e5316fccbe33ca658b2873fbddefd8176900bbfc654117582361ecd743f4dc825ddc2a66d98c2fa28acddca9869f8398f998aaf6312f6499e70eb77cb612450d296eb0ce8884606d3f86d456ab2fda9c9"}) 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(0x0, 0x0, 0x800000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@H\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TCXONC(r0, 0x540a, 0x10001) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x414000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x810) fcntl$setlease(r0, 0x400, 0x3) 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x210000, 0x0) dup3(r0, r1, 0x0) [ 270.410113] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.415644] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.443291] binder_alloc: 14680: binder_alloc_buf, no vma [ 270.452520] binder: 14681:14684 unknown command 1212179200 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 270.468014] binder: 14680:14682 transaction failed 29189/-3, size 0-0 line 3254 [ 270.477895] binder: 14681:14684 ioctl c0306201 200000c0 returned -22 [ 270.491198] binder: release 14680:14682 transaction 590 out, still active [ 270.498504] binder: 14680:14695 ioctl 80104592 20000040 returned -22 [ 270.505722] binder: unexpected work type, 4, not freed 15:33:52 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x80000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/status\x00', 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000001440)={'syz0\x00', {0x0, 0x2, 0xca8, 0x6}, 0x34, [0x7fffffff, 0x8, 0x3, 0x0, 0x0, 0x120000000000000, 0xc5c9, 0x2, 0x1, 0x0, 0x0, 0xff, 0x1f, 0x25, 0x4, 0x6, 0x6, 0xfffffffffffffffb, 0x174f, 0x6, 0x1f, 0x5a52, 0x7, 0xa6d3, 0x6, 0x3, 0x7, 0x7, 0x8001, 0x7, 0xffffffff, 0x8, 0xffffffff84d45b7e, 0x1b6, 0x4, 0xffffffff, 0x1, 0x81, 0xffff, 0x7f, 0x9, 0x9, 0x5, 0x80, 0x5, 0x4, 0x0, 0x1, 0x5, 0x1, 0x1c4d, 0x9, 0x1, 0x86a, 0x6, 0xfffffffffffffffa, 0x3ff, 0x800, 0x3f, 0x5, 0xa3a, 0x41, 0x7], [0x6, 0x100000000, 0x7ff, 0x1f, 0xfffffffffffffff8, 0x71ec, 0x101, 0x40, 0x40, 0xfffffffffffff80e, 0x3, 0x2, 0x6, 0x0, 0x4, 0x800000000000000, 0xdad, 0x5, 0x7b4877dd, 0x296d, 0x10000, 0x1, 0x10000000000, 0x40, 0x6, 0x1, 0xffff, 0x7, 0x7, 0x800, 0x6, 0x2, 0xb6, 0xfffffffffffffffa, 0x5, 0x9, 0xbec, 0x100000001, 0xfffffffffffffffe, 0x266b788b, 0x6, 0x986b, 0xb08e, 0x877, 0x3, 0x8, 0x5, 0x7, 0x0, 0x30, 0x6ed8, 0x8, 0xb0c, 0xffffffffffffff0b, 0xd5, 0x3ff, 0x8, 0xba, 0xfffffffffffffff9, 0x8001, 0x800, 0x80000001, 0x10000, 0x1b], [0x0, 0x7f, 0x4, 0x8e4c, 0x6, 0x7fff, 0x9, 0xffffffffffff8001, 0x7fffffff, 0x1, 0x213, 0x1, 0x1, 0x7, 0x5, 0x10000, 0x3ff, 0x43f, 0x5, 0x7, 0xfff, 0xfffffffffffffe00, 0x8e5d, 0x7, 0xffff, 0x100000001, 0xe41, 0xffff, 0x8000, 0x6, 0xaab, 0x4, 0x111, 0x237, 0x8001, 0x40, 0x8001, 0x3, 0x5, 0x8, 0x2, 0x7, 0x9b300, 0x800, 0x3, 0x5, 0x8, 0x2, 0x100, 0x6, 0x400, 0x8, 0x7fff, 0x389, 0x3ff, 0x4000000000000, 0x101, 0x0, 0x5, 0x8, 0x400, 0x101, 0x4af3f6c9, 0xcdfc], [0x6, 0x7f, 0x81, 0x6, 0xfffffffffffffc00, 0x7f, 0xfffffffffffff800, 0x0, 0x3, 0x6, 0x0, 0x5, 0x8001, 0x10000, 0x6, 0x8, 0x3, 0x0, 0x9b, 0x3, 0x3, 0x5, 0x0, 0x118a0da2, 0xcb94, 0x3, 0x6, 0x0, 0x5, 0x53c0, 0x3f, 0x5, 0xffff, 0x9, 0x5, 0x80000000, 0x101, 0x0, 0x3, 0x7, 0x7, 0x8, 0x9, 0x100000000, 0x4, 0x7ff, 0x4, 0x1, 0x80000001, 0x7, 0xc613, 0x7fe94040, 0x3ff, 0x62, 0x7, 0xffff, 0xff, 0x68c, 0x0, 0x7, 0x10001, 0xfffffffffffffffa, 0xade, 0x8]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x1230, 0x30, 0x700, 0x70bd2d, 0x25dfdbfc, {}, [{0x84, 0x1, @m_bpf={0x80, 0x6, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x80, 0x10000000, 0x8001, 0x7}}]}, {0x54, 0x6, "2c17e4009fdbc04e96a805001f320db9535e036d6c0157a838297c77a83e6ca96dae8ae6157ece19973e0fca646245d96d4e11315e013dd4b3c5a6b560bd553c53714a213462991859c3542d16c48d25"}}}}, {0x103c, 0x1, @m_csum={0x1038, 0x11, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x5e, 0x7, 0x5, 0x23f}, 0x1a}}}, {0x1004, 0x6, "9d53ee88272ad46dc731d5ca08d4fe873ddf9f1dc6bcafea8d8d5d3d1b92497d7dba1b78ae922e40717bfecb3b6142281516205894ceece8b3aff2e7b86330ef8eefe8779508d28e40be5275d7a86dc3d07f858ee562142958bb5804a40d44e8d5432ed0afd9d1e26f7857c0d75803495e3aedc72af1e62b3c62f0fa074cc46f83f6116154ad29715d5c4df07b32f71c87ee26f7a87d63d637945efe61d74d75a9b3bd21965ff3f727825b1e6abc40dff3c078c4f8aa4aed5654d88a3bf56a972d4763897dc999a294172d4cf728fa4a58086798a82b44dd05f5913ada38fa22b27429600b4436f305138dc91b11c4930cc43a9bfe9846e93f1d47fddd479918574264d2a18153b39dd9f8f9a2d5aa7cde3a3629a81dde1b3c06fb0d65db0b6077f10dc7abe81fbe448b92367491b82907cfea3a9fd4148ff17b508fe7ba19a85e5496e9c110a1b6f7c2402d3fe9a8db0075a743a8b60da1b391cf8758d4ac2431d4fd7670a485a49badfcfee24635262da26f2394959c43a2b077681e6adf08c49936ac2ea2fcba3a7b6ec270bf25861ae4fdb4542fca064a6a60b645f95cd5c1549a890bfda469ea45ebc4b4f04143183de3c42104bda8975c93c78b86af421c61255e735c6098b4ce6baf53ad1fbcc2b639cf7d291ac5ba7817cd28b77691f25d0886cab5e4983c0963fd3b31e1324c2eecd19e78eda4a28ffaa347e92b5bd21c8e9ffd4472b437514ea6ff1b1c4ddefef8c490f6bda725e8fa2d5b3bee034033674ded3643e19bb13c0f4e1a55e044232b72b7a7533e378fd016251c828e266697aa4afac74420105d111c395e3db396d05e271ac460220c43758296ba452feefdcf6d7d24d4d3885bd75b565bea03d0f2c332208f1232f8eb17902bc3b2e1491a1eb5c3d50dbea17cb2c96193f41fe4f2cb7b1a8aaf692c622625a1aeb376025b92bc26be0bc59de0375fb3bd2d5447e27feb2027fd2542498fd2f9d81787470e929df3e62c21ef1c6b1f8ed00d7d0928504f5a889dfaa4c972fb171ca2b3d3188d7da69a7722076892ff1fd4fe7f1854b1042d8b1c2c9a07c4d589a68ae60a4f8331926f1527fdad645f88c81e1b4ae0864a4731c80910db8a9b69b349954187758e299951be5334f2565685460ba7cb0f78311449d62ceb1648483d07556d8337b6ee9a5952c559eb28eab08f526101954390e30762670e3b59b652b680176972df7bce623a1b05e54a2c1299806517a6ed4c9960dbce96c0b366b7d2db11979eab51ded49dc52f60a84954ca82cc83baf2ca52c6890f30636ce209f149b5ceb3db1dd18271aa59a110cd7cae281e450449cac8719c9424380c0bd7ee0251bd532470c5c2ab21402bd6071f06b9f66aa3273a3689dd98573bd6ff9794a7b3b657f24c14c21869663931209e3787b0876dbd47ade4e282bdae8c5cf4965219a160afa9977661175fbcb417cdbfc8c9ce7187ee3b0771bbc438eb0fcae58041a854e3aadfe59775bf2e37ba267500ce11059ea8ef53cad5205caacce777a3142e96c45dc950523a2a2748297b8936423f22afa4933ce84c68a0d4544582abe101ffdab5451b58b10d0d56750330b578dcfa699c22f34b35496121383052cce8b305dd302d341117dde4db0947fbf607844f45ff9016636edc557d2bd77b311976cdb4b90e73d6e7204c9dcb20bc881a14f5cea07df38eb520dc38cb13ac9d26edb3826d9e9bf9f76b7f8f67f5dbbff415ef73b382f8ba9739d15799ba014fd3152066fd48f52b5a4a219d69f3b679997f31727dfb7eef7a8f8bdbe0d31539e34343937c527281c2ba1c61498a48dd35998c80d6a6bcb8aba731b58d2e5407d75c6c646e1b5cf68e26e4c7bb1d47eea892f8ae6b47da8a60e7ba46545dd948195c8eac3820115b3368207c7ecb6690f8c532c45079f5ea5afeffb1efb4619386c570b51fb9ba3996b1c8299d7261cd8c684b460b7e4e2b333ba8760abf98713ded6a2302eee14780279fb7a67f3cfa98f72b37f17a0461fd2d252d18109c697a3e3b3de058e2dcbc59043f2dba2adc33afb95e98c071dae4227a03ef82a0d4f18cf3719c03b70f939b6a084a649411b4cddaff1bcd7a698fb81fe54639d1ec5792c040518720bdeaf7e21bab643ccdd28e07eab9c3d1055cbeb704a65a3d6c474d5a4e44ff6d28491ca059588efc337fe78c0d5cedee06a5fbc62839388c9a9a88bdfd469852def9d67d39d593e74b727a84a79bf8f9f54ec9fce35e50c4fba4008444c32e5f43f09a19dbe58be48acf861ad6591d029318e1f47d70151e7f315875db5bc6da0d4916b3167eae7d2b62f74d5ff1262b75fece9dd7f382f3a275e14bf526f116c3ea6272639d7fc06782428c131256b8b668ddd26b9e1e2251292ebc880141cc3e8b25754fa8a247dfa99deddfd11c412f445d2e5984b0660bde32896fa3b31922e8f279ef061f3718b0ebf68f938f4eec58f4bca3399d307cc5baaa0b2c50df91477494282d422fd870a6d8c0d168eb8e993f740df227965644a043c1f92c9ab926a95b822463e257803d1bfbcb378e224825546b6d042c2321336af9acf7e6e672258a2d1e14f780af89fc71803e53e918cb2d17f3d6e2bb6092e081ef91235340706666d714c95e7ad5720240411ddad37c75f9affac5c7ce131a9628cc9fc54d35433e07b9f25319bed94b82187f85b57bcb4144d3b65487cf5cbb7b4e1db99ce39659f53b719b346d90b73c017b77aba5a9c6c077c8d9c411eec53423b2ec1e8859513704af1a175cf30c01f72c273c8ad664040a36cda51a530c998b56d7e10d87cccce57df373297995eef2df4d5d916983af9f9174061b0ff87d74d7ce14f7ab63237597c874f0f19c8531b1ddbf6da1ac39c9aca916ace4b819b344a8e89e7ea2c81d03c905fefedb816a077fdba0ac4b05c537d4e473aeb7fe834721beb32e9fd00116e1f0fb3286c72661769f920ad167ef004e1370ca4df9a0fc3de0fae7d97c30a3b549687c9a45c1967f11f7740dc0148111acd524b701ad6a67f774d6cd88ab2e44af5a21768317d344c0145d7c7693538ddcd7bb1fe4d4f6795c32b5a0d42c1e28ce0b76f8b374436c8399c7f4a9b937169cb9b253e59c446c11c4808f52a502985fdee748e237b7cace1305ca665584e0738c374ed3dc04763df0a15513823599c5f2794433c50155a67ee57a4fbf88f2d4bf1ea08604b5cab0d0f406036f0614b7922e224f362b3fabe6634a8245c6c1f73079f2dd526f3c0235bd4a4f80a95546048bb5d55be3890617f702522e28e2fc8e6da28f9a8def715590b26a3cdde8c0da0342474c6f9f167a57673c007edb9b9b065fd6a6b8a9eb33ba371496c871f5eb319bb6e52f957d5508da001287e8558c2976c6df7abc286d7a9871a36c014fc8d0efef8fd0b38d4be043d2b4cf4f781954ce6e6afe45694b417b916e140316d8483b5e37be0e458a4aa977b7e77ebaaf8d6689d7c783dceaff9f097318b1ec0fbcf295037718e887be2f89176dd0ab7974101481fc050012510c8359a89d9f4cd7ba675261b9f20931e528c9d6bd6822adf592507f9d393dd7dab6c05abc6064765ba1027b61705997b57ecb48ca25a657634602224ac704389a4e3160de1dea3d7ae90a79abc7d999c154854e4e70991125412c32c4968de3c3e8cf229c0b75245c946fe7ea81dad93f52fbb1e403cfd380b71f1a8496c2dd7addd4c9f2cb8c378b90878377168de0f301c040de1dd9a44a4ffa8d1833fbf7d0f704dc8ce65468abe0ce5f565cd5b87f5da9775074fe7fcf7336b18e66bcebb045e896bf4aab9f1bf5cfe19dd7741da96b92bd2774e12642dc5a759e092c63c6d91b6d31e63749d2272057d97a50f7c0b38a85c58710c6bea0006b6e8cbf5547dbb85c1c2bcdf0f827e7c6bd195d8fc8a0d7e685745b6cbb8f5dcbbdeca7aa061247f2a5c8de1a6169d6bc023700328194edd6f77613b85cf8e56f8d26f0e8e95a8063a8a90cee3a9afdccf15ecdcf9fefd312d46a55391057ee81b79c682fad448a1e1440eade44ea4382d9437b08328270c2f65b2a16aa604a3997bb75e1dcae590f697632f223b7e35ec66bfa0c60c0a495c123457f15dd00c486acd3d72f74ab1687e3a98f79a53383942f2bfe49ff20e6d81b54f6f7466dbed0acec8723bc3b91372a7740c71be2d5c709be2428b1c3c3315b510a75c2ad78ccd092ac31403304b213a57ddc270cf0f2f3110664d96003c2be10ad10b2a2dc8047f5e96963208cd48d5800b54e71b3f8b96c0227fcab07d4357f9b5e63252d30085bd92036b4dbfc5dbd96caf34d6c1047375021bef9c5ac555645a339315999ed369f3bf4ac9fc30632064e606ffe5814e4207201c7500f221e1d03bc9603cc03afda53f89870b220420fa063b8a873c0ce4e57771a478636eedf71956ae0bb161a56bef3dd2d235bd286b7addbaca9f1532b5fa8f724350fce953825da2d26cba3945b912182b3ab60c0691f57ab8b5f46952cb4c2f98621f4cfd1a6d8f7192112eee71921bcf24e3fb08b662d583fab852cda1f6d1f9407fdf8f8e636676c8ae73801fc7ab68fbe92dd9bfd46248f5ab185aef28012228cb7f0ccd6b52424eeebe1fd68b5edea1726bb8ede11f83955ff744712da7000d20d2773ebff001ab4a41c4810926a527fd59b912e45c305a5260445b2f3dc4fde8400732569ec753cabfd2a3d2b2bace49e286cc3900ad4e9e5f653c67a7126d3ccf0a64ecbdd8a176a2cfc2b5de47bdc121744ea82541d2a92777a2ade1de50d8dfe9efe2f76941a6bd4609e69c01065504f4847526d18bc499ceaabcad4a337132f7e9d1c69d29ada3d85df0b9fcd42fe082f36f1cb8bf39a42842ea4f5ed08e5711757a10e48f48ef4d9b6d2d73a71ff39ba1428b23a952a457157dc17181c64ea10d6a0c514b48c62da332fd696c7f921b0db45fdd2669647f9a6923bd9d43da7bb9bc2ccd06231e0fa590908f5cb1c3195ff5a4a534fed34e11d4f8e093e0e1e01fb9ce1a426dd223083a3129b7813d44356c1c709d8d8cccd0cd3c4c5a38a4b5d3ea712949752584578b6a5eff45b60277f155ce087430fd78a40eee9bd92aeda0ea01151c9d34e5973524eff7ed4823e1801c497f6199228a732311afb78717a6a18b35c7904b3ae2f06db7ba2a458f1ec6b3fbecc6a8c935a64161566aaf48879a1eb5a4e5b8491974a8ddbd63d628fee9b747eb7bb4d3e4d2f1ac2eb5f01c4c639becf3bceed3a1c9f56162f1786d4d0ff14ce1642e66bf4fe590d285070ce24f5e3c955ece8384e840073eaa31c98ec834ab767e0eb0ad25764e6645c32468a096bc876fbf2d91b2945e73a94a7c712474d2b17f85d94bd539029ea9bedd76ef7746c663dd44e02d941dd48ee9a852f54db8d2a52b7429ea2381a99710bbb7abd2d51f111dac948c2638258812549a462376c451d004ac58bd832a6e42837dda4394acb6840788c782a051078208dec07d966513e1a6034e453210ca5476d3e181c793c1362a2bb1285b0ef9609a0bf2d1d58827e4965a10b55b900a2177d5bd8e17c6ac994cabe8511fbb48f17b7198475d43f44af4b0b097161a8c7e4b05bcc258be8e3b8789b32abf7d402a4eb471a56e961b34918193a8463a42db6840346942f39eaa285d5b40fbf5e7798b820910d9f12f1d69403232837871922b9b55555e592a466ca167225a7e46c8c683856955f62b97f207e10164dccabacfe68208f42ba0bd11467948d0129245502ff21320996acae2b2a1af2"}}}}, {0xc8, 0x1, @m_tunnel_key={0xc4, 0x7, {{0x10, 0x1, 'tunnel_key\x00'}, {0xa0, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0xb3f, 0xffffffffffffffff, 0x3f, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}]}, {0xc, 0x6, "22f45109e0"}}}}, {0x94, 0x1, @m_tunnel_key={0x90, 0x1f, {{0x10, 0x1, 'tunnel_key\x00'}, {0xc, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x6c, 0x6, "bf7aa11f0bad6ece8d626a26572ad53fa88d9e239d5a08ef352a05fcb21f641ca57a0c5fabcc4ca66f467d0e04fa77d0ed1461781ef4b62707fc1fa3f043056099c67efce9ecca766a520012590ceb5cfb97826edf90fefe74e9a9105529d40da0dfe3b3fa313411"}}}}]}, 0x1230}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000) dup3(r0, r0, 0x0) 15:33:52 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 270.518935] binder: undelivered TRANSACTION_COMPLETE [ 270.521809] binder: BINDER_SET_CONTEXT_MGR already set [ 270.526716] binder_alloc: binder_alloc_mmap_handler: 14680 20001000-20004000 already mapped failed -16 [ 270.549654] binder: 14681:14699 ioctl 40046207 0 returned -16 [ 270.559328] binder: 14681:14684 unknown command 1212179200 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x81, @mcast1, 0x7}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x1, "b571b74441bf5e76"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x100080000) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000300)=""/79) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0xfffffffffffffffc}) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$KDDELIO(r0, 0x4b35, 0x2) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x4) r4 = dup3(r1, r2, 0x0) setrlimit(0x1, &(0x7f0000000200)={0x200, 0x4}) ioctl$TIOCEXCL(r4, 0x540c) [ 270.565864] binder: 14681:14684 ioctl c0306201 200000c0 returned -22 [ 270.572861] binder: BINDER_SET_CONTEXT_MGR already set [ 270.578453] binder: 14680:14682 ioctl 40046207 0 returned -16 [ 270.595441] binder_alloc: 14680: binder_alloc_buf, no vma [ 270.610467] binder: 14680:14710 transaction failed 29189/-3, size 24-8 line 3254 [ 270.633472] binder: 14680:14682 got transaction to invalid handle [ 270.639945] binder: 14680:14682 transaction failed 29201/-22, size 0-0 line 3117 [ 270.655103] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.661409] binder: undelivered TRANSACTION_ERROR: 29189 15:33:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:52 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b99597f8f3a4e8200000000000000000000"], 0x0, 0x0, 0x0}) 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0xfffffffffffffffc) fcntl$setlease(r0, 0x400, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x7, 0x2, 0x2, 0x20, 0x19, 0x8, 0x8, 0x2, 0x3, 0x4}) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x8) fcntl$setlease(r0, 0x400, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1f, 0x5b09, 0x1a, &(0x7f0000000080)="e0487736b6a83b4a163af72cb2461e05f91ff9a5397d8af18a8d"}) 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x0, "027bcb89c7107544"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x739e, 0xc8a9, 0x7fff, 0x800}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0xf) r5 = dup3(r0, r1, 0x0) write$P9_RLOCK(r5, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 270.677941] binder: send failed reply for transaction 590, target dead [ 270.689601] binder: undelivered TRANSACTION_ERROR: 29201 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendfile(r0, r0, &(0x7f0000000080), 0xe289) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r2, r3, r4}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 270.733836] binder_alloc: 14723: binder_alloc_buf, no vma [ 270.748547] binder: 14723:14730 transaction failed 29189/-3, size 0-0 line 3254 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:33:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)="f16752adcd85e8fe7f5db9e92647dafbf5f68851ef6590ccabfa95114398763077a2c469a1c547a263ffa89e704432e7906abdcd8f84e4e5a9576e16bfbb31a5764ae4fbb426b960f666536a71a0a2", 0x4f}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="69adcd9c9d4f22b883275157aa92e0b1680002bcd2c5ae0a5f2493029b", 0x1d}, {&(0x7f0000001100)="aab0c1242a162ce9027c6a84e3af6723d71f4dfeb3d0e0ea6a25111985d44f2e1220ec6c61b18417cdc8ff12b2d02917067a357b770bce5f9a8a137c4cdf6855bdc83c078822d6c647d2384f1dbdea905703328c4f03dc897297e0e187db72e6cfcc46800010286b19f418bb3bdbd14d46c581e7aeacc51e4d969dceae2f192d71d7b71e76cba09ed03d3a3476405609", 0x90}, {&(0x7f00000011c0)="683741aa9d5bb540e9dd394ed90c1bdb5d3529563f86054c4d3f1225fd527c1962f76646d0f9af9afceb5de532287659c38a79c3efa29b0501d54b2c6fdf767f13d89cbae3831ea79af82b23204c4853cda7d31409f27d8751f034a0f2a698abe036b7db512722c843695bdd323efd6357010bc54fa45481654469a17b47a4281dee8bb5aa654bd387e913c2c4813b1a77617cf455dd749875bd1c37ce6fb0a3ea49a5d6625ea0094849c5b598", 0xad}, {&(0x7f0000001280)="898ac9a3dae0b61d2a65b762ab3898ebd1c529b1e5a2efd6404361028a9c1e680cbe20892967714d387f55e7394dd906c009d87a912ed400ff3fbab691f4fc3f648506a29eac3e4d1790aa33d192a2819a67665a9414ffdaec3b2bd43132faa37563644af28ceac0d22ae693f1b996385c25f066268a5f49d63f97e7e7d373aeac6b22f56cd7423f626d91659eebf267fc9dcc3efa95dd0c9dd754eb8ca99ddb1593d1886aca1cda49ba46ff4955870d7a26f65ea716d434a2b329426ab5c4410320def9882fafd850f19464ef5753b89391dea42c39b37525d8a87582b43c59dd1b3350916498d1511832b9de28cf", 0xef}], 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x600, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440)='/proc/self/net/pfkey\x00', 0x2202, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000001480)=r2) sync_file_range(r0, 0x100000000, 0x4, 0x3) r3 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) [ 270.830959] binder_alloc: binder_alloc_mmap_handler: 14723 20001000-20004000 already mapped failed -16 [ 270.836279] binder: BINDER_SET_CONTEXT_MGR already set [ 270.857169] binder: 14745:14750 ioctl 40046207 0 returned -16 [ 270.861348] binder_alloc: 14723: binder_alloc_buf, no vma [ 270.863385] binder: BINDER_SET_CONTEXT_MGR already set [ 270.873993] binder: 14723:14749 transaction failed 29189/-3, size 24-8 line 3254 [ 270.875434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34253 sclass=netlink_route_socket pig=14755 comm=syz-executor.3 [ 270.894513] binder: 14723:14730 ioctl 40046207 0 returned -16 [ 270.899514] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.905282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34253 sclass=netlink_route_socket pig=14755 comm=syz-executor.3 [ 270.906169] binder: send failed reply for transaction 598 to 14723:14730 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup(r1) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000002c0)) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x0, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000380)=0x6, 0x4) 15:33:52 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) 15:33:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000086dd80713a8f816514ff5eb4bf9186a50000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 270.926637] binder: 14745:14757 transaction failed 29189/-22, size 0-0 line 3117 [ 270.944768] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.965825] binder: 14745:14757 got transaction to context manager from process owning it [ 270.966639] binder: undelivered TRANSACTION_COMPLETE 15:33:52 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 270.993404] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.995192] binder: 14745:14757 transaction failed 29201/-22, size 0-0 line 3108 [ 270.999721] binder: BINDER_SET_CONTEXT_MGR already set [ 271.019119] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.024856] binder: 14766:14771 ioctl 40046207 0 returned -16 15:33:52 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x4) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='bdev!GPL)\x00', 0xa, 0x1) 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 271.042263] binder_alloc: 14745: binder_alloc_buf, no vma [ 271.047691] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.080736] binder: 14766:14771 transaction failed 29189/-3, size 0-0 line 3254 15:33:53 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='/dev/binder#\x00') getsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='/dev/binder#\x00', 0xd, 0x2) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 271.094137] binder: 14766:14784 got transaction to invalid handle [ 271.123491] binder: 14766:14784 transaction failed 29201/-22, size 0-4880776096162775040 line 3117 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x3d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 271.141296] binder: 14786:14792 got transaction to context manager from process owning it [ 271.159804] binder: 14786:14792 transaction failed 29201/-22, size 0-0 line 3108 [ 271.170299] binder_alloc: binder_alloc_mmap_handler: 14766 20001000-20004000 already mapped failed -16 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 271.206404] binder: BINDER_SET_CONTEXT_MGR already set [ 271.236443] binder: 14786:14800 ioctl 40046207 0 returned -16 [ 271.236447] binder: BINDER_SET_CONTEXT_MGR already set [ 271.236469] binder: 14766:14771 ioctl 40046207 0 returned -16 [ 271.253801] binder_alloc: 14786: binder_alloc_buf, no vma [ 271.254759] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.266115] binder: 14766:14784 transaction failed 29189/-3, size 0-0 line 3254 [ 271.270418] binder: 14766:14810 got transaction to invalid handle [ 271.285127] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.293865] binder: 14766:14810 transaction failed 29201/-22, size 0-4880776096162775040 line 3117 15:33:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000100)) finit_module(r2, &(0x7f0000000180)='/selinux/create\x00', 0x2) 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg$unix(r0, &(0x7f0000001100)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000080)="35e5ad632274b4d82694e6ce26386967aff238caacc3aed7c68d65b116420d54cd46c73fb44b71041854f93350317ad616d4b00c32ca7c3c5305277c9dbaaca7e21c086bb4d73f5744e03a261e82f816be857c52f2600fb85cb51bfc369ace1488785780d9fd22f1de8fb18417aba19d9c78ff35945dceb26f0515c4627e98d2f4e868e6ee48ef449cf3aafc24900d48f04ee863762f788501ad99fbb30280132f47f247e91f5258a3388986a06f336e23ce923d8e9359adb0584a9d714513016a562ed8a44a9d95d51a3cc4c02011e6de8b541ba25b3f69a2d92bebb9e063fbcfed81518da198c5575179f73d784422d2800e12bd4eaeb26090ce8acc6978a130fbcee0dd309e16fad8a29c8c0a330aa3c045f63a610b9cbffa08957a925a5fd48735772c19551475b27fccadb40f4b4f6324d4dd8c9f5c91c1f1d549e3030340e1f08a55ed107c85a88c35f7c3b10a4ef8f13d0d680081c1f9a47b293f61f19eee3554a3e4f474a7b408d48fc7787240c22ccca5b1a5987492cc0b6133dff22e0010d186ad90889198d5289df557c25dd84c4ef2a49a29e61830f73e5efc6ba279fedf175159efa29a8c31bd023a54162ebaab0039829a65ff32479c8861462285db06f87e3edd875a4367b94ee41ef5b8cfb9abb119208f2f54822d33ae012f38b93ace72c41026ad03a3a22a34c937f9ac3ceb839a97b6f1202301fab670c539ce5d0a67746adf95f5557e45aa675ebb6799288bcc6b79b8d8b9d5f8588f89bf63607bec72f0cb6c4f63f1d3c39ba2d7fd4765bea015ebeb5590ab75f27b5986333757bbbafd317818f7e99f2172e660ecf642d8f63088e9d971779b40e7f0fc5c13b1c2412616a8c8cbb493a610e4d6b8e11851bbbb010c651f179c1c46b90702e01716b6beec6ec61c3ddb09f6c6de0d439b03e9e38db91472e3499c39df6644002531fcdf0a203e4e7a3674bbf11eccf140260ab6a4be97c2cb8b16c2cd6daf94a9232b6029178349f23e26febf21bb7063c730ade29d1ea5e65220d9075d9fbd029bf6b6133a2c78123a7b9f50179b306a46f7c5bebfa8b6a5233d63112a40965c3ddb3dcf4077c0923569d93f57775cf0631424c32932679a924714bd8d930ce4c621a285b57c99dae6df361bdeda06bbba5514caf657084355ce938924288ae8fd84f86664e39308f098c5fb6799f085066d1b8e0002e5616141526db541ca27e0eef0082b86667baba5e4a735f39675bd5f01211e3e435d0ff37a981a4de4fb6e65316d81d913d326e86ba9dedbdf6cb773477fde430f0040de49d7b7696230ac806e8c1aee0b369454eb32d0a3526825b3bed9ae9b688edc2813a926736fd6359bb26aad92268944fe5784f93955454ebb9ff3f622e47cd13055ffd0f3411df44fc246b8c6bb9a3d147eb253ac91629dc4dcce44316ad70fa61d194ff7b281c43599604bf066b9e0785392cbd640d0ded7413d02871449f47c8b5f1b5e6fda2e419c7e0691ecb67fb03ccc8c463fbefde6b0d1da37aacc89e70e6fd418a97880cb7bc2cd9afa32781f068c3560140d83953aea8687e58dbe615dfec9c5a458f9704cb08355812a0bc89f0dd54e6a56f44c67a8e1e55b5fd33a2ea30b956e82e8ae2a6d70812f1621ab95529561b3a39b83501dc2128588c6a141f2dd16339a27b5a4bf98d62caf22b3c5aac4aeab3a27dc0858668c66a6767b45e78ee45515aa4cc967a17a50fc34ed0ce961088cc192f09dbfd0cda9c3a68ab85e86d9516cfc0da80db9135fc085c7f7330c138f4506d8dd7b5a2aa9053777f3e4f654d2c35f7ccffc0d93aca04cca973ce54038d98c7ada58f70dbcf2d0a345c041607f64fb3f0158c04b7a526ff23bad1a8cc2370bdc243a9dac783ed758b89a6c4a48dab5b4faeafd5249e4482838260a0483ef6f458a3b6b84401e70db3031ccccbc52e9c1657b62471a1af798a0b57525b5086d1e3476e3ebf013721f852ca1e233307796d21c257bbf423e0a560d7e125129d8fc7821c578c585e5b434ba7b1f4ab12794eab500551b75208b9ca88cce9b39084243a4c27e388ef074207aeb8fd68c2818e534decc08114b5b237ada245a1374ab6de8a5e5d85fefaf8527374603fa27c35e1e99e3a1d0ab1133963a664609df448d8751c914a09fcf9faf9d6f443bc57564f86a66603e5a22aac48749bdf7761d557d98752188c85f74beaf55176d743ee488ea1e9700f127283ffa96a5ce209a32f87aa5c74b83c4f20ba05ca9b686cd23dc015946b553550a0b47feace59f91823e1c6729598b6541871ebc86472509a6d52bd13d2096c36dfc070d9c9b292afe670276910e9782f7bc14e500e4490a9c3b08cfa170c4afec1273e0a031162868ac54cf48482a4d792a26278ad1f553bf45bbc0ab3da4ec406a1b8f2ccd46627e713ce6e3dad67e89666d302795aa54f3c6fa43a943569081f5c955e6cad990c1c7193a2bdb4c7afe2f1049a742c19f18de6ad5fcf90a85011a88ebea9f7e78e020311e6c6771ed0311ac6d006dbe8403255d7e7836536579645d49a96b18cecdcb84d00dd7b9a00938a8dd5e67444084f7f8e9725675d549d6c63b16a95e11fdb55594e23d8ba985af194c02a2dbc9a8eb0bda654d137af8fe1f2fa2b08e64487d07aa5f7d2d4739015f19c10b616e8e8fd2c808752323a227c8569512c200619ee3e8c40ec4dc84af5c877297da2b83beb37cc80101d22f1248d61c0bc16e453ae7800e78c87c49585cbbbb55e5111265ff9db490706274842fa917fa17808e2acafbde1b18d51d0d36d7e2168eabdee0b85601da727734ff8c233994b3decbd6b2eb561b63dcbd22d7fd855d61abade643d87c6ae6a2877d4161727f3f39c0dd572f5ae1ad3f3f7d39d39c1233682de1764c948df20e9690df48a608b00128c6a4950c68aa73e065f433d6d283fe02ac978ce25932dc1ae45d03f0d312b22829ddd0486105fafc811dca363d6cbc309698f6648e4fbf40c0155f55e2e66850f9b41f7a051cb329966d646b6826f35cb2e467e8b9a0d70bc14a1c113729b7ec2705f351d1d598e1517cdfc40a50a7884cbd7be9b535ec1b7e45025592320c23fd637ac84bc6f4decf6ef28ca3d8e44a46932e3661ced387905709a15be767502ecd28f640f6b2ea9240b5f13c03be56bafb081c74df86d1251ad3720c408d13e1564a65985d6a3448e48c07829f5019d3a6535b1aca4fee3003782e9c85c95801b68b21a6b760cdada5cc3268d2fe7f7b9e026cffcdeea95a0c66a1e274b2d96ac75a266a0b7c7503c006dd505da3c823094dd963f92c69a9bbdafeaf6344c61be7c3682ed4310c2a2d0445b1722a9093fed9c953e60715856c076ab4b64ddd61b4045ed67b53d0ed2d16cd1366ea8eae782d56cd6a961887df17cf8436f3bee083f23fa25aaa10b49ea9835577aeafe4107749c6a61e6ea88d9389231c4e5cdee19fb9755fbb9b34cb48a4315bdaf82fd7c9c8dcc6bef2feff10a31b07216251f1f2ac63a807d4e6aa181503c976f722f7d59e1a6398d9b3e8d6c8b33d655c39a3bf16e05063352dac8d6a4c37c34bc65e1e4b676a8c7c7c1e0197c8f1e48a0154b4cc249614a84becbece13ad982f579f6b1b92092ce4fc57bcc74ae8612849777c1e85d4ebfbe032ef7c2f8e529292c0c83598e23f7c0127f99b912f287a7a0e60683c3fb74f41a641385f5a102b09f4632d4fd15baf4d8ca08385eb3308e7c259ba779326844f5808199e1de32e54ad499151e511e3b036d41f7d158fb03343849600404afc0dbbb5e95382399f566d654b727f748e6eb78f7c9607a0d78cb559d94fc1a39f8b72c3d1f5e04de4f4d4462e08349f7bb194202a8a9aacd4ad4f51cee590ef5560626b78c90e64d446b9daac4c3bb3c91f03bb4f3ebab69efd1648a774b345ea5693ade1185ac5b219b58d754bcd6ce27b2f021f9d595bc1af41266a115b495ceb6faba470ad3c2a1e2f8a169af71ea4ff548d1ab57bfdc7fd8096ac1244f4be25b248f9cb083e1c245194f1fe0ba51016b3a5fbbdbda233e8dc266092031687618e2f7c3ae149fc20cd6a7b338c2ee753bad5ddbe29b211e294150ae5af9e09541abf0856836bafa7ea2e5888663d8091b5f9eb8e50f74df6aed4b39dce5a15a3b714257c20ddb2ba801de78f2daaf4b7e7b9644c9848558719d6941fa48b9fbc72fd41efc19833d6657fadbf56d6280c93dd788742bdaf99f9331ca95b058da9c761349174295a4ddaa51e387ba877357831efafbccd455739f97c06f64c6868c88710c7ec699bae75600f4d9321ed77e91cd0fe67b7a493b96e02d40769a1adc4d3337b78518b9879090330d04e475cfb12c6ac910f8e1b10dceebea1cc054f186a90e32c7220bfd31fb00faa1ea7a7fc7afc36306578c0e36875426141d2bca31ef1328009689107278ecb1f7f93a66226f86d1e6c4b50d5998e1247357ad41188e88b565809b04eb0a71411949b6111e109f1b8acb5272308b42c73621db380322979e1e2890ebee46d95dd4a5c3c9d53a555a59b57c11ae95a27477dec9bf82019bf5dc45149eb4725667b53d92b5cf6822c23c97ff53020f740e6da258114ac7b956a71125de28b8402bb3fb5c37de6df4920245c9dd170a65f8378b532ea618572e95c23b2bd846bfb7b85ba1ff7451d1867c4f651084eafd0f032ad603aba11b04b4bab78d9e7773673821a35cdef5ece274dfedaea47ef932025afa9c774dbd510665647f6bd2829726aeb080a67a94b9aca7036077a93645495743a54dd9357fce27e2d4d58b342ae43bd02bfc3bc4b8e42b8a9b87139e9157b6b02510796a5aa498a7adaeb338530ec35cf622b3e64891e568946fac2ec08cfb94ea90aac122fd5d007bb1407c0d28479d1587befe61c14ca66351f7670ac65abea6b1a8d879ea2bb252b961de6562ed0a670d6de42726ea6e65ff52cd50585a8f3ea654d0698d2716a2488a85d7d676bdb7bff3acb8cb867c0319628525dd0e36dd7a3630027d3dfddbbb900d40a772f9dec4fae1dba3ee33d8852a410871a412d1c3835deb19b9b5bd0b50e05a7193e403db242546efae5a5acf690d33b012ce2970280d2f7819ad88009806b3b975a27dbb62498a355bd8f4172c41f76dad2b4901a2f95b53679e59616c72685420c5d5625dbfa0ea076379c502dbbac4ff081d5f23f349c19db32b3bba109385dd7671418b428b438659b57c9aad551363b4d39f20f6bd6a9dd29a9f70a6d0aaf77b5c8a641dd77a895b46f30566802a5401df04aae70ef84a6d28ec3eb96f03f0b0e106388acf3e9f290bfb9a8641cd103e22f5962359b7c1ff596070a3e69a0e6b9d5f45606b24df99472d9b51cbf9b1aec0da5791cae16c626a59e2c069cb90d80c07df8099b7f94f9c715e14751f71228bd050f0be20c88cf84adb81f6360459e249e6558a83091cb7cc7f5f4e0cc9b53edb948adc68057c73030f84c12f1c4aac9764ba0f7541f6c49276903e3f1ca458961280df5c7087b14ad6e3fa531f9cafaad33975aab87813446e7b85933a2471868d52746ba194f1f1387a13dc685be7033c166829af4c57aa34ec22ee7079fdbf0eec58e0b805b5880f31c403d3e45b5e23eaa3547e0e5a33c5b5e027eeacb935cfd3ec0f5d5e30d237305acbfa7ffe0ac953cb2a82e5f43c7ad01115b415d16a60932f57e64cd7cf33fd95051a0650e6ebdeb53f10666f058f3120e23ee90c4820685db8354b4a8799987a0396c7367fc8c9530797dfb461c0ed86b48a3", 0x1000}], 0x1, &(0x7f00000010c0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x30}, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001140)=ANY=[@ANYBLOB="ff7f0000000000000100000000000000020000000400000005000000000000000008000000000000070000000000000000000000000000000000000000000000000000000000000000020000000000000000000007000000ff7f000000000000ff070000000000000100000000000000000000000000000000000000000000000500000000000000000000000000000047050000000000000001000000000000010000000000000000000000000000000000000000000000020400000000000000000000000000006f0000000000000009000000000000000700000000000000000000000000000000000000000000002ec5533f0000000000000000000000000101000000000000220c00000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000"]) fcntl$setlease(r0, 0x400, 0x1) 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) dup3(r1, r1, 0x0) preadv(r1, &(0x7f0000002680)=[{&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/143, 0x8f}, {&(0x7f0000001340)=""/213, 0xd5}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000001440)=""/91, 0x5b}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000024c0)=""/163, 0xa3}, {&(0x7f0000002580)=""/238, 0xee}], 0xa, 0x37) 15:33:53 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 271.308920] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.315201] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.336395] binder: undelivered TRANSACTION_ERROR: 29201 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0xc, 0x100, 0x5, 0x18, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x2, @local, 0x1}, @in={0x2, 0x4e24, @rand_addr=0x6}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x5, 0x7, 0x0, 0x0, 0x1}, @sadb_lifetime={0x4, 0x3, 0x3, 0x8, 0x2, 0x100000000}, @sadb_x_sa2={0x2, 0x13, 0x100000001, 0x0, 0x0, 0x70bd2b, 0x3505}, @sadb_address={0x3, 0x5, 0x3c, 0x20, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_ident={0x2, 0xb, 0xcd, 0x0, 0x1}]}, 0xc0}}, 0x20000000) [ 271.365374] binder: 14819:14825 got transaction to context manager from process owning it [ 271.385911] binder: BINDER_SET_CONTEXT_MGR already set [ 271.404844] binder: 14819:14825 transaction failed 29201/-22, size 0-0 line 3108 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x0) [ 271.418308] binder: 14824:14830 ioctl 40046207 0 returned -16 [ 271.434182] binder_alloc: 14819: binder_alloc_buf, no vma [ 271.447623] binder: 14824:14841 transaction failed 29189/-3, size 24-8 line 3254 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 271.468243] binder: 14824:14830 got transaction to invalid handle [ 271.475120] binder: BINDER_SET_CONTEXT_MGR already set [ 271.475993] binder: 14824:14830 transaction failed 29201/-22, size 0-0 line 3117 [ 271.494693] binder: 14819:14845 ioctl 40046207 0 returned -16 [ 271.506158] binder_alloc: 14819: binder_alloc_buf, no vma [ 271.512487] audit: type=1400 audit(1553700833.462:53): avc: denied { module_load } for pid=14824 comm="syz-executor.0" path="/selinux/create" dev="selinuxfs" ino=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=system permissive=1 [ 271.513885] binder: 14819:14825 transaction failed 29189/-3, size 0-0 line 3254 [ 271.550425] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.554747] binder_alloc: binder_alloc_mmap_handler: 14824 20001000-20004000 already mapped failed -16 [ 271.581947] binder_alloc: 14824: binder_alloc_buf, no vma [ 271.587584] binder: 14824:14830 transaction failed 29189/-3, size 24-8 line 3254 [ 271.593155] binder: 14824:14841 got transaction to invalid handle [ 271.595462] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.601776] binder: 14824:14841 transaction failed 29201/-22, size 0-0 line 3117 [ 271.619572] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.625813] binder: undelivered TRANSACTION_ERROR: 29189 15:33:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000100)=0xa4c6) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xff) 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000001c0)=0x80000003) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000040)="084d66679fd6ddc3087756acb8b98ffcb2f1219dbbdc6249d35f1436b1648b6ce652a819edee2e84a3a2ddc357d3103d1defa52b2678c679") 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x60000, 0x4) fcntl$setlease(r0, 0x400, 0x3) fcntl$setlease(r0, 0x400, 0x1) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0b00003400000000000000000039cb6b5cb1d0382c3aa6e8eb7743b93a81af9220a27d6cacec47691bc7772ff3bbf753f83db3b363ca2f7c62fff6a45776db4c8c4068818fca0fcdeca136f375f5c6a89562eb5fb873eb91bad9202b1de2edccf32bae3e3d124902d0a2a9a48650bdea8458d9c6d3ae29b3e67db8cf2325dde8cf5c861d587baebde8dcb7e0b68f60a3131ddf2af5474410cd0a84c4fef885e55fdb7f71a966aaebb172b81537ea1a826b5339c854f33c5513d9ce477b8908"], 0x0, 0x0, 0x0}) [ 271.631381] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.636863] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.666167] binder: 14867:14869 got transaction to invalid handle 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x7, 0x4) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) dup3(r0, r1, 0x0) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2e000, 0x0) fcntl$setlease(r0, 0x400, 0x3) [ 271.677692] binder: BINDER_SET_CONTEXT_MGR already set [ 271.698732] binder: 14867:14869 transaction failed 29201/-22, size 0-0 line 3117 [ 271.716605] binder: 14863:14871 ioctl 40046207 0 returned -16 [ 271.723566] binder: 14867:14878 ioctl 40046205 ff returned -22 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000010}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000180)) dup3(r0, r1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@dstopts={0xff, 0xe, [], [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x48, {0xffffffffffff2260, 0x10, 0xffff, 0x5, [0x1, 0x7, 0x8, 0xfff, 0xeb, 0x1, 0x92, 0x7fff]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x400, [0x6, 0x2, 0x7f, 0x20]}}]}, 0x80) [ 271.734371] binder: 14863:14881 got transaction to invalid handle [ 271.749880] binder_alloc: binder_alloc_mmap_handler: 14867 20001000-20004000 already mapped failed -16 [ 271.754333] binder: 14863:14881 transaction failed 29201/-22, size 0-0 line 3117 [ 271.762650] binder: BINDER_SET_CONTEXT_MGR already set 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 271.784386] binder_alloc: 14867: binder_alloc_buf, no vma [ 271.790376] binder: 14867:14869 ioctl 40046207 0 returned -16 [ 271.808717] binder: BINDER_SET_CONTEXT_MGR already set [ 271.808730] binder: 14867:14878 transaction failed 29189/-3, size 0-0 line 3254 [ 271.816451] binder: 14867:14895 ioctl 40046205 ff returned -22 [ 271.832296] binder: 14867:14894 got transaction to invalid handle [ 271.845406] binder: 14867:14894 transaction failed 29201/-22, size 0-0 line 3117 [ 271.852601] binder: 14863:14881 ioctl 40046207 0 returned -16 [ 271.853522] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.859025] binder: 14863:14871 got transaction to invalid handle [ 271.874668] binder: undelivered TRANSACTION_ERROR: 29201 15:33:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x20a000, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x77359400}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0xea0, @ipv4={[], [], @multicast1}, 0x401}}, 0x0, 0x5925, 0x0, "99420883c47af390f53efcf9b4671472920c91fe0c0888bd9c38fef17b24ce97447e0e7e5923c7ae6e3c5b459af1ddeb7c947bd39f673061bee324bc154355f5aac6979dc6f8854d86badb1ce6da5bb1"}, 0xd8) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') 15:33:53 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x5, 0x4df9}, {{}, 0x17, 0x3f, 0x3}, {{0x0, 0x7530}, 0x5, 0x101, 0x5}, {{}, 0x0, 0x9, 0x9749}], 0x60) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = dup3(r0, r0, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000300)=[@enter_looper, @increfs_done={0x40106308, r6, 0x4}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f0000000280)=[@fda={0x66646185, 0x7, 0x4, 0x1e}, @flat={0x73622a85, 0x1, r7, 0x1}], &(0x7f00000002c0)=[0x30, 0x48, 0x38, 0x20, 0x78]}}, @dead_binder_done={0x40086310, 0x2}], 0x78, 0x0, &(0x7f0000000400)="d7d0ff3eae07d9cedc3297ccdb8150f9a1d162d6e81922a8b1f96da5c2ad8c38b3c4a2ae8584a31bbe67416c433abd9974cfae9fdfc3a8af7faad69fd8df899b222413684f2f5321469810ba24460d6e1d6635bd642d9b4d49743e3adbf9aa4a5e79447c08f3f174825a86803ec58f1d8cfab9bcba094a7b"}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0xed57, 0x1, 0x9, 0x2}) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x800) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fbff404000000007000000000000000000a1080000000000bebf4d1cfa088def00000000000000000000004969328d19bac61f00000000000000000000000000"], 0x0, 0x0, 0x0}) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 271.877247] binder: 14863:14871 transaction failed 29201/-22, size 0-0 line 3117 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ptrace$pokeuser(0x6, r1, 0x633, 0x6) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 271.912908] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.948238] binder: 14908:14910 unknown command 1078001659 [ 271.952632] binder: undelivered TRANSACTION_ERROR: 29201 15:33:53 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x140, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x1) [ 271.959801] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.965037] binder: 14908:14910 ioctl c0306201 200000c0 returned -22 [ 271.976856] binder_alloc: 14903: binder_alloc_buf, no vma [ 271.990444] binder: send failed reply for transaction 621 to 14867:14869 [ 271.992101] binder: 14908:14919 unknown command 1078001659 [ 271.999776] binder: 14903:14912 transaction failed 29189/-3, size 0-0 line 3254 15:33:53 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003880)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f0000000080)=0xc) sendmsg(r0, &(0x7f0000003580)={&(0x7f0000000180)=@xdp={0x2c, 0x3, r4, 0x32}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc}, {&(0x7f00000000c0)="25d822bffbe9a4fa6db87be7d064d373086df967919b656c", 0x18}], 0x2, &(0x7f0000000340)=[{0x1010, 0x117, 0x6fa, "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"}, {0x1010, 0x116, 0x6, "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"}, {0xf0, 0x3a, 0x4, "9df1f939fa28b672242ac192f55f0641249b389d2130f7f5d6d485419fed485e4e5b738d7bb506485235f1f11fa4fd58edce9215f3aa7831ad4d748da209d6bcedab1bda6e723979be43092aa0d013088b7150a72697fc66c1929fb590f4c347c230839cd682c715f1f2e25d51ea568a4c5dc8bf7805c8f13ab55e807ebc9370a81e564880c5834b136b311efc63eb56c4b227b3a2b54120b4215d4b5317e1e90466b1981bf74f2c0037b27e01afc8dccfef06ff6fd78ddf98dd85ca8b211102f107ffc3433177c460f933d802d4a0a342cb41c02375b77880f356a7c03a71"}, {0xc0, 0x117, 0x7, "829fc1ddcd886604c424a763f3989b55504f1d16afbab817181a7b2af4407f32c65d6cf64d8490f45a645181edb0a0862589bfcd14b8c201a209a8e9e0054e9055338700f45aeb8e62104c62599c36cd4d623fec6fa136657065524ff13f96476233079a2551eab5780d4aefe7593e9810890f7d89f93e7794ab0c3344ba029e28109419d996237723ac1b338319c5da7f6ab972fb5dfa06f5f092e34266e84b754ab4258be0de11967206552c75d2fe"}, {0x38, 0x105, 0x3, "766e0dd91c6cb8fa8b91226a34fd7975fc535e38bffae079346fb2685e3088b909d9a4fb79"}, {0x1010, 0x11c, 0x2, "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"}], 0x3218}, 0x40) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000038c0)={'filter\x00'}, &(0x7f0000003940)=0x78) getsockopt(r2, 0x7fff, 0xffffffffffffffc0, &(0x7f0000003980)=""/4096, &(0x7f00000035c0)=0x1000) dup3(r0, r1, 0x0) 15:33:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.016599] binder: undelivered TRANSACTION_COMPLETE [ 272.032623] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.044258] binder: BINDER_SET_CONTEXT_MGR already set [ 272.052852] binder: 14908:14919 ioctl c0306201 200000c0 returned -22 [ 272.057478] binder_alloc: 14903: binder_alloc_buf, no vma [ 272.065556] binder: 14903:14912 ioctl 40046207 0 returned -16 [ 272.084806] binder: 14903:14926 transaction failed 29189/-3, size 24-8 line 3254 [ 272.096989] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.106465] binder: send failed reply for transaction 628 to 14903:14912 15:33:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @rand_addr=0x6}, {0x307, @dev={[], 0x1b}}, 0x50, {0x2, 0x4e21, @multicast2}, 'bcsh0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000280)={0x2, 0x3, 0x8, 0xdf97, 0xdb, 0x8}) 15:33:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x80000) 15:33:54 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0x9, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000e700000000000000"], 0x0, 0x0, 0x0}) 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.127504] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.143555] binder: undelivered TRANSACTION_COMPLETE 15:33:54 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @rand_addr=0x6}, {0x307, @dev={[], 0x1b}}, 0x50, {0x2, 0x4e21, @multicast2}, 'bcsh0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000280)={0x2, 0x3, 0x8, 0xdf97, 0xdb, 0x8}) [ 272.173705] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.179280] binder_alloc: 14944: binder_alloc_buf, no vma [ 272.188757] binder: BINDER_SET_CONTEXT_MGR already set [ 272.212411] binder: 14939:14945 ioctl 40046207 0 returned -16 [ 272.220500] binder: 14944:14946 transaction failed 29189/-3, size 0-0 line 3254 15:33:54 executing program 4: mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x168) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r4, 0x7, 0x10}, 0xa0) clock_settime(0x3, &(0x7f0000000200)={0x77359400}) 15:33:54 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.241992] binder: BINDER_SET_CONTEXT_MGR already set [ 272.258450] binder: 14939:14958 ioctl 40046207 0 returned -16 [ 272.264478] binder_alloc: 14944: binder_alloc_buf, no vma [ 272.264496] binder_alloc: binder_alloc_mmap_handler: 14944 20001000-20004000 already mapped failed -16 [ 272.281786] binder: 14939:14960 transaction failed 29189/-3, size 0-0 line 3254 [ 272.302065] binder: BINDER_SET_CONTEXT_MGR already set [ 272.307419] binder: 14944:14946 ioctl 40046207 0 returned -16 [ 272.314717] binder: release 14939:14958 transaction 638 out, still active [ 272.323346] binder: undelivered TRANSACTION_COMPLETE [ 272.328680] binder_alloc: 14944: binder_alloc_buf, no vma [ 272.336851] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.347000] binder: 14944:14972 transaction failed 29189/-3, size 24-8 line 3254 [ 272.359324] binder: 14944:14946 got transaction to invalid handle [ 272.370677] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.376164] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.379786] binder: 14944:14946 transaction failed 29201/-22, size 0-0 line 3117 [ 272.382218] binder: send failed reply for transaction 634 to 14944:14946 15:33:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @rand_addr=0x6}, {0x307, @dev={[], 0x1b}}, 0x50, {0x2, 0x4e21, @multicast2}, 'bcsh0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000280)={0x2, 0x3, 0x8, 0xdf97, 0xdb, 0x8}) 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dbe5738328697d1acb0eb336c27e77eabaa4d32fdf7fdb830ad114058bb82cde531c905b17448c9dd3cd55e239a1bcab1cb7926372ec677888597c6d09b91b757871bb12637811cf72fc7404a0a6f7a4eeb1ea4a1919b06405eab0a81228a87926668ddcbc8e088b1ef243b1fb9c5e7c554cd0b9edc0051a6ab59bb21a9"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x2012, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000340)=""/118) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000200)=[@enter_looper, @clear_death={0x400c630f, 0x0, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000000), &(0x7f0000000040)=[0x58, 0x40, 0x40, 0x40, 0x30, 0x38, 0x48]}, 0x10001}}, @clear_death={0x400c630f, 0x2, 0x4}, @increfs_done={0x40106308, r2}, @increfs, @exit_looper], 0x2, 0x0, &(0x7f00000002c0)="bbdb"}) 15:33:54 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x5b91, @ipv4={[], [], @multicast1}, 0xffffffffffffffc1}, {0xa, 0x7, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xb6ec}, 0x3, [0x4, 0x8, 0x620a, 0xffffffffffffff2e, 0xf0da, 0x3, 0x5]}, 0x5c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402040, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x8) r3 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x20000004}) dup3(r1, r1, 0x0) [ 272.396791] binder: send failed reply for transaction 638, target dead [ 272.404275] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.409754] binder: undelivered TRANSACTION_COMPLETE [ 272.430277] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.439090] binder: 14978:14984 got transaction to context manager from process owning it 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 272.452030] binder: BINDER_SET_CONTEXT_MGR already set [ 272.457519] binder: 14978:14984 transaction failed 29201/-22, size 0-0 line 3108 [ 272.476289] binder: 14985:14991 ioctl 40046207 0 returned -16 15:33:54 executing program 3: mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x168) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r4, 0x7, 0x10}, 0xa0) clock_settime(0x3, &(0x7f0000000200)={0x77359400}) 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.500746] binder: 14978:14984 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 272.504203] binder_alloc: 14978: binder_alloc_buf, no vma [ 272.543861] binder: 14985:14991 got transaction to invalid handle [ 272.546563] binder: 14985:14998 transaction failed 29189/-3, size 24-8 line 3254 [ 272.550351] binder_alloc: 14978: binder_alloc_buf, no vma [ 272.550373] binder: 14978:14984 transaction failed 29189/-3, size 0-56 line 3254 [ 272.551909] binder: 14985:14991 transaction failed 29201/-22, size 0-0 line 3117 [ 272.582179] binder: BINDER_SET_CONTEXT_MGR already set [ 272.587775] binder: 14978:14996 ioctl 40046207 0 returned -16 [ 272.599786] binder_alloc: 14978: binder_alloc_buf, no vma [ 272.614490] binder: 14978:14984 transaction failed 29189/-3, size 0-0 line 3254 [ 272.616861] binder_alloc: binder_alloc_mmap_handler: 14985 20001000-20004000 already mapped failed -16 [ 272.631975] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.641216] binder: undelivered TRANSACTION_ERROR: 29201 15:33:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) dup2(r0, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063080000000700000000ff00000000b7d4e9a408593a70a200180000000032caec7b0001080000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x40000000003, 0x0, 0x77fffb, 0x0, 0x10020000008, 0x0}, 0x2c) dup2(r2, r1) r3 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) dup3(r0, r3, 0x0) 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000040)="c2061efa9389862d54336e53f54be05fc38116746bce5f2d8520613871ecbd4f779d155fd117328a39e7022c2a0644fbf16655", 0x33}, {&(0x7f0000000100)="99e0c75ff7fe0afceb5db3a1d51e0440ae62278ec57b63d3a2a43c1fd3809c377fa83fcb7ea01a92d729005adea3f6ff7191f0025e5689a7fb154e02a6e74d2f2cb7cabdc4efc73c9090eeed7307a84f8cfa2db22ed944392aaaa8217ecb368a5dc59475076bd6faf0202ad546caad0de84da37fa36ae55f54de7d6b1fc0534d87cc56ea61833c8574fadbdaabbfc5d3bb37878346d3cf41af4018409dd79c41635374", 0xa3}, {&(0x7f00000001c0)="245d23c693a56b20217b2ea1c3bd9e46831ffbc273675be7305c515157babfa77215ba4ea09e155ed006921559cb1b1779460a88f8f5f48bd0bdc961d3f4f01470b4a318924919e8201bba929aad07dfe41b39f04c6e9acd8f7f2873e3f46acf125bcf4aac66ae1ec79179f804617ac1afd5751295e2674da68ad77533c3207cd3ebef860d98d1f9b81e5376d8070bc9aa890d25141eff7f349205b2ef9b0ce078142e8e7bb7e072b02db8dea7eef8e3a88d2456e4bbf812e4a8a032a5866e50837ad087d09c8602863c1aa4bf9174dcdbbe8d07c30f33d16c905e0be95259ccbb230e7ea5db1c2cc9f7aef561f190577bbcba3c", 0xf4}, {&(0x7f00000002c0)="dde58a420939c57a36893baff6c5392cc8bb1d", 0x13}, {&(0x7f0000000300)="edd2a88abe06ba47ce35ec0fb562f33ce227d1674fd209b23e5ba4ccd26bbe7e9527eff7145c633bb523c5761fb3829b6801d5226693b51b0f42c0bbbb2fc2966253143573707ec14afe6b0f2e0e39077e6fd5d61932cb3aa3c11069b7f2d68b71a424772cd609", 0x67}, {&(0x7f0000000440)="573a454b8767fbe924f1b6083818b4dcfbd72db72ba8a11615c7b34bb208230c3cc8184cd896393f7db568d984c32a7ed096671d3e9af2c836e6bd0f20f5d0a23516490e7f3e9eed03df94ebd8f8bad9fd52920ac8c16a01d223251f0da7a31c223905e45a6f3d318e6eb3e78d62a1b32ad0de224e0d48a8e373b7385d814cc2695cf6af79b326e158940c4ca82a9bdcbb2c72846fbc689ebe6fb3e658184304635319e3ee466f58a9a37bde31908d99e3f9f8020673e04d0c30bb2e5074d1ffaff1539ec1a8e01963756b0e373d", 0xce}, {&(0x7f0000000540)="9832573a06e13bd117d2a6abf6b8e7df011f0fa431c7577871583a03242c6b1fe63dcfd2f7a6c4f3f4d2dba533968bf16cba0949904b18163a327a77a883a39e5dcc5ba5538213636afb3f012d0d3fadb9a18e8b1f99b587c96acbdefb210c2d5882aae7869e182398ef5825f25df70d4fbfda013304c2da91b607bc86a4ef6ac78f4213e1b85f9cd855a780ba5f0880872a073e8be1e6d4bd12ac2ca5799cd5418d7cbc617b06dc187bd9fbac6121e7bdd69012ea192821f8a145b41461bf739714d45668ac098ae6b862316423adc063cda429f62bb82139403bb6f49e468a9f6ebea27fbb4b34", 0xe8}], 0x7, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 272.651823] binder_alloc: 14985: binder_alloc_buf, no vma [ 272.658033] binder: 14985:15016 transaction failed 29189/-3, size 24-8 line 3254 [ 272.667714] binder: 14985:14991 got transaction to invalid handle [ 272.674571] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.675173] binder: 14985:14991 transaction failed 29201/-22, size 0-0 line 3117 [ 272.681157] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.693374] binder: undelivered TRANSACTION_ERROR: 29201 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.707347] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.735970] binder: 15023:15030 got transaction to context manager from process owning it [ 272.739275] binder: BINDER_SET_CONTEXT_MGR already set 15:33:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.753222] binder: 15024:15031 ioctl 40046207 0 returned -16 [ 272.761056] binder: 15023:15030 transaction failed 29201/-22, size 0-0 line 3108 [ 272.795607] binder: 15023:15039 got transaction to context manager from process owning it 15:33:54 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 272.804556] binder: 15024:15041 unknown command 549632 [ 272.810533] binder: BINDER_SET_CONTEXT_MGR already set [ 272.815975] binder: 15036:15040 ioctl 40046207 0 returned -16 [ 272.824428] binder: 15024:15041 ioctl c0306201 20000000 returned -22 [ 272.831499] binder: 15023:15039 transaction failed 29201/-22, size 0-0 line 3108 [ 272.834866] binder: 15024:15031 got transaction to invalid handle [ 272.840394] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.848259] binder_alloc: 15023: binder_alloc_buf, no vma [ 272.862629] binder: 15036:15040 transaction failed 29189/-3, size 24-8 line 3254 [ 272.872632] binder: 15024:15031 transaction failed 29201/-22, size 0-0 line 3117 [ 272.873345] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.893109] binder: 15036:15049 got transaction to invalid handle [ 272.901241] binder_alloc: binder_alloc_mmap_handler: 15024 20001000-20004000 already mapped failed -16 [ 272.902565] binder: 15036:15049 transaction failed 29201/-22, size 0-0 line 3117 [ 272.918256] binder: 15024:15031 unknown command 549632 [ 272.923721] binder: 15024:15031 ioctl c0306201 20000000 returned -22 [ 272.930811] binder: 15024:15041 got transaction to invalid handle [ 272.938383] binder: 15024:15041 transaction failed 29201/-22, size 0-0 line 3117 [ 272.946885] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.952705] binder: undelivered TRANSACTION_ERROR: 29201 15:33:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000180000000000000008000000000000000000000000000009db1995190fbb8938ba54e884ae8e994f5dce2b494c6e93f7c7f26176e92e8eef8ad1241d50691833251bff5514956eec18b976c1e5ef6644ae6ffacf4e6402ad85219ba00da2d9af3c4e5fba96fa2b58fd1aca87da72", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="852a6273b991048fa4c40d2aebeb0d35cd779c00000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r1) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000580)={0x9f9681c6082e1af7, 0x3}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xb12c, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8c00200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x84) write$selinux_validatetrans(r2, &(0x7f0000000440)={'system_u:object_r:dpkg_var_lib_t:s0', 0x20, 'system_u:object_r:ssh_keysign_exec_t:s0', 0x20, 0xffffffff7fffffff, 0x20, 'unconfined\x00'}, 0x6c) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f0000000280)=""/79, 0x4f}], 0x2) 15:33:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:33:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dbe5738328697d1acb0eb336c27e77eabaa4d32fdf7fdb830ad114058bb82cde531c905b17448c9dd3cd55e239a1bcab1cb7926372ec677888597c6d09b91b757871bb12637811cf72fc7404a0a6f7a4eeb1ea4a1919b06405eab0a81228a87926668ddcbc8e088b1ef243b1fb9c5e7c554cd0b9edc0051a6ab59bb21a9"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x2012, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000340)=""/118) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000200)=[@enter_looper, @clear_death={0x400c630f, 0x0, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000000), &(0x7f0000000040)=[0x58, 0x40, 0x40, 0x40, 0x30, 0x38, 0x48]}, 0x10001}}, @clear_death={0x400c630f, 0x2, 0x4}, @increfs_done={0x40106308, r2}, @increfs, @exit_looper], 0x2, 0x0, &(0x7f00000002c0)="bbdb"}) 15:33:54 executing program 5: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0xfffffffffffffffc, 0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2400, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x32, @empty, 0x4e22, 0x4, 'sh\x00', 0x10, 0xffffffff, 0x17}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x5, 0xfffffffffffffc01, 0x80000000, 0x824b}}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 15:33:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:33:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 272.967515] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.982181] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.999727] binder: 15058:15061 BC_FREE_BUFFER u0000000000000000 no match [ 273.009845] binder: BINDER_SET_CONTEXT_MGR already set 15:33:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dbe5738328697d1acb0eb336c27e77eabaa4d32fdf7fdb830ad114058bb82cde531c905b17448c9dd3cd55e239a1bcab1cb7926372ec677888597c6d09b91b757871bb12637811cf72fc7404a0a6f7a4eeb1ea4a1919b06405eab0a81228a87926668ddcbc8e088b1ef243b1fb9c5e7c554cd0b9edc0051a6ab59bb21a9"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x2012, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000340)=""/118) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000200)=[@enter_looper, @clear_death={0x400c630f, 0x0, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000000), &(0x7f0000000040)=[0x58, 0x40, 0x40, 0x40, 0x30, 0x38, 0x48]}, 0x10001}}, @clear_death={0x400c630f, 0x2, 0x4}, @increfs_done={0x40106308, r2}, @increfs, @exit_looper], 0x2, 0x0, &(0x7f00000002c0)="bbdb"}) 15:33:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) keyctl$set_timeout(0xf, r3, 0x6) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x6, 0x9, 0x7, 0xffff, 0x0, 0x3ff, 0x2000, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0xfffffffeffffffff, 0x4, 0x2, 0x80000001, 0x2, 0x1, 0x0, 0x91, 0xd44, 0x9, 0x4, 0x1000, 0x6, 0x0, 0x5, 0x7, 0x1, 0x1f, 0x3, 0x1000, 0xfffffffffffffffd, 0x20ed, 0x8, 0x0, 0xaed1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x4}, 0x22010, 0xfa, 0x1000, 0x7, 0x7, 0x5, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, r1, 0x2) [ 273.033664] binder: BINDER_SET_CONTEXT_MGR already set [ 273.039119] binder: 15054:15063 ioctl 40046207 0 returned -16 [ 273.046745] binder: 15060:15066 ioctl 40046207 0 returned -16 [ 273.050830] binder: 15058:15072 unknown command 0 [ 273.071043] binder: BINDER_SET_CONTEXT_MGR already set 15:33:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) keyctl$set_timeout(0xf, r3, 0x6) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x6, 0x9, 0x7, 0xffff, 0x0, 0x3ff, 0x2000, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0xfffffffeffffffff, 0x4, 0x2, 0x80000001, 0x2, 0x1, 0x0, 0x91, 0xd44, 0x9, 0x4, 0x1000, 0x6, 0x0, 0x5, 0x7, 0x1, 0x1f, 0x3, 0x1000, 0xfffffffffffffffd, 0x20ed, 0x8, 0x0, 0xaed1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x4}, 0x22010, 0xfa, 0x1000, 0x7, 0x7, 0x5, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, r1, 0x2) 15:33:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 273.078119] binder: 15058:15072 ioctl c0306201 20000000 returned -22 [ 273.095571] binder: 15058:15080 got transaction to invalid handle [ 273.104049] binder: 15060:15066 got transaction to invalid handle [ 273.106821] binder: 15058:15080 transaction failed 29201/-22, size 0-0 line 3117 [ 273.115662] binder_alloc: 15058: binder_alloc_buf size 1843408051017613312 failed, no address space [ 273.128472] binder: 15054:15073 ioctl 40046207 0 returned -16 [ 273.134682] binder: 15060:15066 transaction failed 29201/-22, size 0-0 line 3117 [ 273.149226] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 273.165713] binder: BINDER_SET_CONTEXT_MGR already set [ 273.171206] binder: 15054:15073 ioctl 40046207 0 returned -16 [ 273.177992] binder: 15060:15066 ioctl 4008744b 20000580 returned -22 [ 273.188641] binder: 15060:15074 transaction failed 29201/-28, size 0-1843408051017613312 line 3254 [ 273.199105] binder: BINDER_SET_CONTEXT_MGR already set [ 273.205398] binder: 15054:15073 ioctl 40046207 0 returned -16 [ 273.212929] binder: release 15054:15063 transaction 665 out, still active [ 273.222180] binder: BINDER_SET_CONTEXT_MGR already set [ 273.228237] binder: 15060:15074 ioctl 40046207 0 returned -16 [ 273.234758] binder: undelivered TRANSACTION_COMPLETE [ 273.240011] binder: release 15054:15073 transaction 661 out, still active [ 273.241817] binder_alloc: 15058: binder_alloc_buf size 1843408051017613312 failed, no address space [ 273.247093] binder: undelivered TRANSACTION_COMPLETE [ 273.257672] binder: 15060:15074 got transaction to invalid handle [ 273.261821] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 12272 (num: 1 largest: 12272) [ 273.267790] binder: 15060:15074 transaction failed 29201/-22, size 0-0 line 3117 15:33:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$selinux_access(r2, &(0x7f0000000100)={'system_u:object_r:dbusd_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x7}, 0x65) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dbe5738328697d1acb0eb336c27e77eabaa4d32fdf7fdb830ad114058bb82cde531c905b17448c9dd3cd55e239a1bcab1cb7926372ec677888597c6d09b91b757871bb12637811cf72fc7404a0a6f7a4eeb1ea4a1919b06405eab0a81228a87926668ddcbc8e088b1ef243b1fb9c5e7c554cd0b9edc0051a6ab59bb21a9"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x2012, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000340)=""/118) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000200)=[@enter_looper, @clear_death={0x400c630f, 0x0, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000000), &(0x7f0000000040)=[0x58, 0x40, 0x40, 0x40, 0x30, 0x38, 0x48]}, 0x10001}}, @clear_death={0x400c630f, 0x2, 0x4}, @increfs_done={0x40106308, r2}, @increfs, @exit_looper], 0x2, 0x0, &(0x7f00000002c0)="bbdb"}) 15:33:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) keyctl$set_timeout(0xf, r3, 0x6) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x6, 0x9, 0x7, 0xffff, 0x0, 0x3ff, 0x2000, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0xfffffffeffffffff, 0x4, 0x2, 0x80000001, 0x2, 0x1, 0x0, 0x91, 0xd44, 0x9, 0x4, 0x1000, 0x6, 0x0, 0x5, 0x7, 0x1, 0x1f, 0x3, 0x1000, 0xfffffffffffffffd, 0x20ed, 0x8, 0x0, 0xaed1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x4}, 0x22010, 0xfa, 0x1000, 0x7, 0x7, 0x5, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, r1, 0x2) 15:33:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:55 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 273.267889] binder: 15060:15088 ioctl 4008744b 20000580 returned -22 [ 273.276886] binder: 15060:15066 transaction failed 29201/-28, size 0-1843408051017613312 line 3254 [ 273.301734] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.307349] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.313316] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.323619] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.340229] binder: BINDER_SET_CONTEXT_MGR already set [ 273.352860] binder: 15096:15100 ioctl 40046207 0 returned -16 [ 273.353170] binder: BINDER_SET_CONTEXT_MGR already set [ 273.371058] binder: 15099:15104 ioctl 40046207 0 returned -16 [ 273.386922] binder: 15099:15104 got transaction to invalid handle [ 273.386945] binder: BINDER_SET_CONTEXT_MGR already set [ 273.396908] binder: 15099:15104 transaction failed 29201/-22, size 0-0 line 3117 [ 273.401923] binder: 15096:15107 ioctl 40046207 0 returned -16 [ 273.408437] binder_alloc: binder_alloc_mmap_handler: 15099 20001000-20004000 already mapped failed -16 [ 273.413273] binder: release 15096:15100 transaction 673 out, still active [ 273.421976] binder: BINDER_SET_CONTEXT_MGR already set [ 273.433484] binder: undelivered TRANSACTION_COMPLETE [ 273.435639] binder: 15099:15104 ioctl 40046207 0 returned -16 [ 273.442985] binder: release 15096:15100 transaction 668 out, still active [ 273.445267] binder: 15099:15108 got transaction to invalid handle [ 273.458849] binder: 15099:15108 transaction failed 29201/-22, size 0-0 line 3117 [ 273.459457] binder: undelivered TRANSACTION_COMPLETE [ 273.480763] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.486261] binder: release 15099:15108 transaction 674 out, still active [ 273.493299] binder: unexpected work type, 4, not freed [ 273.498585] binder: undelivered TRANSACTION_COMPLETE [ 273.504286] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.509754] binder: release 15099:15104 transaction 669 out, still active [ 273.516737] binder: unexpected work type, 4, not freed [ 273.522060] binder: undelivered TRANSACTION_COMPLETE 15:33:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) keyctl$set_timeout(0xf, r3, 0x6) dup3(r0, r1, 0x0) 15:33:55 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0xfffffffffffffffc, 0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2400, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x32, @empty, 0x4e22, 0x4, 'sh\x00', 0x10, 0xffffffff, 0x17}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x5, 0xfffffffffffffc01, 0x80000000, 0x824b}}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 15:33:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:33:55 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000229920fe60c22863000000000000000000000000000000"], 0x0, 0x0, 0x0}) 15:33:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x100802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$RTC_WIE_OFF(r2, 0x7010) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 273.797165] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.819947] binder: send failed reply for transaction 661, target dead [ 273.827906] binder: 15117:15121 got transaction to context manager from process owning it [ 273.835325] binder: BINDER_SET_CONTEXT_MGR already set 15:33:55 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0xfffffffffffffffc, 0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2400, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x32, @empty, 0x4e22, 0x4, 'sh\x00', 0x10, 0xffffffff, 0x17}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x5, 0xfffffffffffffc01, 0x80000000, 0x824b}}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 15:33:55 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) keyctl$set_timeout(0xf, r2, 0x6) 15:33:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) [ 273.846286] binder: 15118:15124 ioctl 40046207 0 returned -16 [ 273.856899] binder: send failed reply for transaction 665, target dead [ 273.862264] binder_alloc: 15117: binder_alloc_buf, no vma [ 273.869574] binder: BINDER_SET_CONTEXT_MGR already set [ 273.878530] binder: 15116:15123 ioctl 40046207 0 returned -16 [ 273.880134] binder: 15118:15124 transaction failed 29189/-3, size 24-8 line 3254 15:33:55 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0xfffffffffffffffc, 0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2400, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x32, @empty, 0x4e22, 0x4, 'sh\x00', 0x10, 0xffffffff, 0x17}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x5, 0xfffffffffffffc01, 0x80000000, 0x824b}}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 273.885780] binder: 15117:15121 transaction failed 29201/-22, size 0-2937016551583851008 line 3108 [ 273.905479] binder: send failed reply for transaction 668, target dead [ 273.909468] binder: 15118:15133 got transaction to invalid handle [ 273.924254] binder: 15116:15123 BC_FREE_BUFFER u0000000000000000 no match [ 273.929476] binder: send failed reply for transaction 669, target dead [ 273.935074] binder: 15118:15133 transaction failed 29201/-22, size 0-0 line 3117 15:33:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:33:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$notify(r2, 0x402, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000d124b1feaf97cb9a21a27e5b3baefb8bdea1d1a80e63119a30450f9f958a8bfde7fc5f0b2bd7d4dc986cdec50694cbe0c04f901003ad65a19bad87a91311078784cbe3e7114372b10a82b920d18020af8f8c55a5d48729efd5c378e8585ef9807af026a1fc067abee8d6f37d3d68e043b9df0ca386fb719ba494248cf041ce6fdb774bb13048ddcf3b5c3d80a16e81624c50efcab177278e5512b582f87f5a5140b6f8119fba34f20d1911a55d40b5e05aa0b291c887337af2c282170a175916"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 273.940864] binder: send failed reply for transaction 673, target dead [ 273.970586] binder: BINDER_SET_CONTEXT_MGR already set [ 273.971514] binder: 15116:15140 unknown command 0 [ 273.980627] binder: 15118:15124 ioctl 40046207 0 returned -16 [ 273.986113] binder: BINDER_SET_CONTEXT_MGR already set [ 273.992647] binder: send failed reply for transaction 674, target dead [ 274.000703] binder: 15116:15140 ioctl c0306201 20000000 returned -22 [ 274.010773] binder: 15117:15142 ioctl 40046207 0 returned -16 [ 274.010877] binder_alloc: 15117: binder_alloc_buf, no vma [ 274.022680] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.029069] binder: 15118:15124 got transaction to invalid handle [ 274.033934] binder_alloc: 15117: binder_alloc_buf, no vma [ 274.035455] binder: 15116:15140 got transaction to invalid handle [ 274.040942] binder: 15118:15133 transaction failed 29189/-3, size 24-8 line 3254 [ 274.054812] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.059534] binder: 15117:15121 transaction failed 29189/-3, size 0-2937016551583851008 line 3254 [ 274.062809] binder: 15116:15140 transaction failed 29201/-22, size 0-0 line 3117 [ 274.077567] binder: 15118:15124 transaction failed 29201/-22, size 0-0 line 3117 [ 274.085325] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.094177] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.099673] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.105543] binder: undelivered TRANSACTION_ERROR: 29201 15:33:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:56 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="69f96ff84489829ab2e6d39189c9d07fb3d6273d83d0cd3711e19ae2c9a1ec5949b6dc50ba4e897c6d52eb23e6b9978f2b2ab3cfc2ac277d9a319d4447e2825a7850c02cc64e6416d62f7e7a164ff4c8caa08a0e6b28e59fd44e920a4d5a65ec1390738ae9043c2f4f9a521b8c72e92fdc71b41d9aaffc0d4b82ca54a198181fb30dbbb7d8ad7f272c64743a57120c1612c295e6a84e26cff83fd07665b2bf709606e3df211737", 0xa7, 0x0) 15:33:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$notify(r2, 0x402, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000d124b1feaf97cb9a21a27e5b3baefb8bdea1d1a80e63119a30450f9f958a8bfde7fc5f0b2bd7d4dc986cdec50694cbe0c04f901003ad65a19bad87a91311078784cbe3e7114372b10a82b920d18020af8f8c55a5d48729efd5c378e8585ef9807af026a1fc067abee8d6f37d3d68e043b9df0ca386fb719ba494248cf041ce6fdb774bb13048ddcf3b5c3d80a16e81624c50efcab177278e5512b582f87f5a5140b6f8119fba34f20d1911a55d40b5e05aa0b291c887337af2c282170a175916"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:56 executing program 2: r0 = open(&(0x7f00007e2ff8)='./file1\x00', 0x144, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setaffinity(r1, 0xfffffffffffffe0c, &(0x7f0000000400)=0x8000009) creat(&(0x7f0000000200)='./bus\x00', 0x4) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x200) getpgrp(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0), 0x0) r4 = socket$inet6(0xa, 0x1, 0x1000000000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = gettid() sched_setaffinity(r5, 0x8, &(0x7f00000004c0)=0x20) fcntl$setflags(r3, 0x2, 0x0) r6 = dup(r4) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000200004771dda9c1bc2ed47dff08"], 0x0, 0x0, 0x20, &(0x7f00000003c0)='\x00') io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000340)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00G@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pwrite64(r0, &(0x7f0000000440)="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", 0x1000, 0x0) 15:33:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000100e7ff000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 274.629181] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.660401] binder: 15152:15154 unknown command 1077954304 [ 274.674286] binder: BINDER_SET_CONTEXT_MGR already set 15:33:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$notify(r2, 0x402, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000d124b1feaf97cb9a21a27e5b3baefb8bdea1d1a80e63119a30450f9f958a8bfde7fc5f0b2bd7d4dc986cdec50694cbe0c04f901003ad65a19bad87a91311078784cbe3e7114372b10a82b920d18020af8f8c55a5d48729efd5c378e8585ef9807af026a1fc067abee8d6f37d3d68e043b9df0ca386fb719ba494248cf041ce6fdb774bb13048ddcf3b5c3d80a16e81624c50efcab177278e5512b582f87f5a5140b6f8119fba34f20d1911a55d40b5e05aa0b291c887337af2c282170a175916"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:56 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 274.680283] binder: 15152:15154 ioctl c0306201 200000c0 returned -22 [ 274.680516] binder: 15151:15158 ioctl 40046207 0 returned -16 [ 274.702129] binder: BINDER_SET_CONTEXT_MGR already set [ 274.707455] binder: 15153:15159 ioctl 40046207 0 returned -16 [ 274.707931] binder: BINDER_SET_CONTEXT_MGR already set [ 274.722357] binder: 15153:15159 BC_FREE_BUFFER u0000000000000000 no match 15:33:56 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:33:56 executing program 3: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)={&(0x7f0000003280)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000005100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005140)) fstat(0xffffffffffffff9c, &(0x7f0000005180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005200), &(0x7f0000005240)=0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 274.738478] binder: 15152:15163 ioctl 40046207 0 returned -16 [ 274.738745] binder_alloc: 15152: binder_alloc_buf, no vma [ 274.745341] binder: 15152:15154 unknown command 1077954304 [ 274.752331] binder: 15151:15166 got transaction to invalid handle [ 274.763353] binder: 15152:15154 ioctl c0306201 200000c0 returned -22 [ 274.768416] binder: 15151:15158 transaction failed 29189/-3, size 24-8 line 3254 [ 274.777945] binder: 15153:15168 unknown command 0 15:33:56 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 274.783687] binder: 15151:15166 transaction failed 29201/-22, size 0-0 line 3117 [ 274.791902] binder: 15153:15168 ioctl c0306201 20000000 returned -22 [ 274.804800] binder: 15153:15168 got transaction to invalid handle [ 274.811656] binder: 15153:15168 transaction failed 29201/-22, size 0-0 line 3117 15:33:56 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 274.830607] binder_alloc: binder_alloc_mmap_handler: 15151 20001000-20004000 already mapped failed -16 [ 274.840363] binder_alloc: 15151: binder_alloc_buf, no vma [ 274.849405] binder: 15151:15166 transaction failed 29189/-3, size 24-8 line 3254 [ 274.851059] binder: BINDER_SET_CONTEXT_MGR already set [ 274.864263] binder: 15151:15177 got transaction to invalid handle [ 274.885157] binder: 15151:15177 transaction failed 29201/-22, size 0-0 line 3117 [ 274.893421] binder: 15173:15175 ioctl 40046207 0 returned -16 [ 274.901666] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.905030] binder_alloc: 15151: binder_alloc_buf, no vma [ 274.907270] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.922067] binder: 15173:15181 transaction failed 29189/-3, size 0-0 line 3254 [ 274.939333] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.946335] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.953571] binder_alloc: 15173: binder_alloc_buf, no vma [ 274.959250] binder: 15173:15175 transaction failed 29189/-3, size 0-0 line 3254 [ 274.968338] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.973978] binder: undelivered TRANSACTION_ERROR: 29189 15:33:57 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:33:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 15:33:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000100)=[0x20]}}], 0x1e, 0x0, &(0x7f00000001c0)="9d13f5a9b42caf9d5f5dde46e9538d0a727203ce80573e26ca030810974d"}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x20800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='\x00') 15:33:57 executing program 3: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)={&(0x7f0000003280)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000005100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005140)) fstat(0xffffffffffffff9c, &(0x7f0000005180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005200), &(0x7f0000005240)=0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:57 executing program 2: r0 = open(&(0x7f00007e2ff8)='./file1\x00', 0x144, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setaffinity(r1, 0xfffffffffffffe0c, &(0x7f0000000400)=0x8000009) creat(&(0x7f0000000200)='./bus\x00', 0x4) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x200) getpgrp(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0), 0x0) r4 = socket$inet6(0xa, 0x1, 0x1000000000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = gettid() sched_setaffinity(r5, 0x8, &(0x7f00000004c0)=0x20) fcntl$setflags(r3, 0x2, 0x0) r6 = dup(r4) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000200004771dda9c1bc2ed47dff08"], 0x0, 0x0, 0x20, &(0x7f00000003c0)='\x00') io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000340)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:33:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 275.478005] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.496813] binder_alloc: 15186: binder_alloc_buf, no vma [ 275.507554] binder: 15186:15192 transaction failed 29189/-3, size 0-0 line 3254 [ 275.516034] binder: 15186:15192 DecRefs 0 refcount change on invalid ref 3 ret -22 15:33:57 executing program 3: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@empty, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000005f40)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00', 0xffffffffffffffff}, 0x30) getuid() fstat(0xffffffffffffffff, &(0x7f0000000b80)) fstat(0xffffffffffffffff, &(0x7f0000000c00)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c000000e105000055f241f9a81f5bfb72fd5f8351092f76d161fad63f1285b487e5a753db5564695e8a4900001c431acb21f8f5a521334d77dcd45ad0f74fb1cd7a75e46b44331e3be1acb229de4cc3d005abf4001945e395d785219890b4fcaa40739a144d11e2104ef37d41daf0854935ef23b30ed96cb8fb983047050e4e0ef51a4d35704e576a4a031d5bdf01e48bc2421f51353ec077e81d6e5986acc72fc435450db9dde55e4fb700025200"], &(0x7f00000015c0), 0xbf}, 0x20) dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) getgid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/current\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/checkreqprot\x00', 0x20080, 0x0) pipe2$9p(&(0x7f00000017c0), 0x0) epoll_create(0x10001) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ashmem\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000001840)={0x3, 0x70, 0x800, 0x100000000, 0x100000001, 0x10100000000000, 0x0, 0x3b, 0x10000, 0x2, 0x4, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x8, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x81, 0x1, 0x100, 0x4, 0x70000000000, 0x8, 0xffffffffffffff7f, 0x2, 0x3, 0x1ff, 0x1ff, 0x1000, 0x2, 0x7, 0xfffffffffffffe05, 0x2, 0x0, 0x7, 0x3, @perf_config_ext={0x3}, 0xa0, 0x3, 0x749, 0x3, 0x100000000, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) gettid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) getgid() accept$inet(0xffffffffffffff9c, &(0x7f00000030c0)={0x2, 0x0, @multicast2}, &(0x7f0000003100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000003180)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create(0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000003200)='/dev/null\x00', 0x10000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)={&(0x7f0000003280)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000005100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005140)) fstat(0xffffffffffffff9c, &(0x7f0000005180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005200), &(0x7f0000005240)=0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:33:57 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) [ 275.520564] binder: 15189:15194 got transaction to context manager from process owning it [ 275.526620] binder: 15186:15192 got reply transaction with bad transaction stack, transaction 697 has target 15186:0 15:33:57 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) [ 275.570476] binder: BINDER_SET_CONTEXT_MGR already set [ 275.576403] binder: 15189:15194 transaction failed 29201/-22, size 0-0 line 3108 [ 275.576458] binder: 15186:15192 transaction failed 29201/-71, size 0-8 line 3040 [ 275.602482] binder: 15195:15198 ioctl 40046207 0 returned -16 15:33:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x239149bb}) fallocate(r2, 0x0, 0x100000, 0xc823) fallocate(r2, 0x20, 0x10000, 0x100008000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0063404000000000000000000000000000f3c0be65916206c2162cb272ef00000000000000000000000000000000000000180000000000000008000000000000003ad55ea2a5cf05498179ccf498548677091c6a0bcb5078c15cc30e277af14d7efb9ca2a14e9b29db15acc357587d8ce4698d027b9c96bf00", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r3 = epoll_create(0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf={0x14, &(0x7f0000000100)="b3dbbf65647a61b3606c6f50757d6508a50853fb"}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0x20000010}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 275.624789] binder: 15195:15198 BC_FREE_BUFFER u0000000000000000 no match [ 275.634873] binder_alloc: binder_alloc_mmap_handler: 15186 20001000-20004000 already mapped failed -16 [ 275.645265] binder: BINDER_SET_CONTEXT_MGR already set [ 275.664580] binder_alloc: 15186: binder_alloc_buf, no vma [ 275.664642] binder: BINDER_SET_CONTEXT_MGR already set [ 275.676280] binder: 15195:15205 unknown command 0 [ 275.677458] binder_alloc: 15189: binder_alloc_buf, no vma [ 275.681767] binder: 15195:15205 ioctl c0306201 20000000 returned -22 [ 275.687024] binder: 15189:15194 transaction failed 29189/-3, size 0-0 line 3254 [ 275.693603] binder: 15186:15192 ioctl 40046207 0 returned -16 [ 275.701373] binder: 15189:15206 ioctl 40046207 0 returned -16 [ 275.719144] binder: 15186:15213 got transaction to invalid handle 15:33:57 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) [ 275.723489] binder: 15186:15214 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 275.733378] binder: 15186:15197 transaction failed 29189/-3, size 24-8 line 3254 [ 275.747602] binder: 15186:15213 transaction failed 29201/-22, size 0-0 line 3117 [ 275.749054] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.761329] binder: 15186:15214 got reply transaction with no transaction stack 15:33:57 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000001900000000000000000000000000000000000000000000020000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x3e7, &(0x7f00000001c0)={0x62e}, 0x8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r2, &(0x7f0000000100)={0x30, 0x0, 0x1, 0x7, 0x418a16ce, 0x3f, 0x8001, 0x5}, 0x0) 15:33:57 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 275.779382] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.786534] binder: 15186:15214 transaction failed 29201/-71, size 0-8 line 3025 [ 275.802024] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.816047] binder: send failed reply for transaction 697 to 15186:15192 [ 275.826045] binder: 15221:15222 got transaction to context manager from process owning it [ 275.845496] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.852286] binder: 15221:15222 transaction failed 29201/-22, size 0-33554432 line 3108 [ 275.861073] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.867941] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.874257] binder: BINDER_SET_CONTEXT_MGR already set [ 275.880929] binder: undelivered TRANSACTION_COMPLETE [ 275.886809] binder: 15221:15226 ioctl 40046207 0 returned -16 [ 275.893487] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.898944] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.905339] binder_alloc: 15221: binder_alloc_buf, no vma [ 275.911055] binder: 15221:15222 transaction failed 29189/-3, size 0-33554432 line 3254 [ 275.921065] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.931567] binder: undelivered TRANSACTION_ERROR: 29189 15:33:58 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:33:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lseek(r1, 0x0, 0x3) 15:33:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x239149bb}) fallocate(r2, 0x0, 0x100000, 0xc823) fallocate(r2, 0x20, 0x10000, 0x100008000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0063404000000000000000000000000000f3c0be65916206c2162cb272ef00000000000000000000000000000000000000180000000000000008000000000000003ad55ea2a5cf05498179ccf498548677091c6a0bcb5078c15cc30e277af14d7efb9ca2a14e9b29db15acc357587d8ce4698d027b9c96bf00", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r3 = epoll_create(0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf={0x14, &(0x7f0000000100)="b3dbbf65647a61b3606c6f50757d6508a50853fb"}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0x20000010}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:58 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 15:33:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000100)=[0x20]}}], 0x1e, 0x0, &(0x7f00000001c0)="9d13f5a9b42caf9d5f5dde46e9538d0a727203ce80573e26ca030810974d"}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x20800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='\x00') 15:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x44) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:58 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 276.395119] binder_alloc: 15230: binder_alloc_buf, no vma [ 276.411094] binder: 15230:15236 transaction failed 29189/-3, size 0-0 line 3254 [ 276.427401] binder: BINDER_SET_CONTEXT_MGR already set [ 276.436319] binder: 15231:15237 ioctl 40046207 0 returned -16 15:33:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x239149bb}) fallocate(r2, 0x0, 0x100000, 0xc823) fallocate(r2, 0x20, 0x10000, 0x100008000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0063404000000000000000000000000000f3c0be65916206c2162cb272ef00000000000000000000000000000000000000180000000000000008000000000000003ad55ea2a5cf05498179ccf498548677091c6a0bcb5078c15cc30e277af14d7efb9ca2a14e9b29db15acc357587d8ce4698d027b9c96bf00", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r3 = epoll_create(0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf={0x14, &(0x7f0000000100)="b3dbbf65647a61b3606c6f50757d6508a50853fb"}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0x20000010}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 276.459218] binder_alloc: binder_alloc_mmap_handler: 15230 20001000-20004000 already mapped failed -16 [ 276.460174] binder: 15231:15237 BC_FREE_BUFFER u0000000000000000 no match [ 276.476456] binder: BINDER_SET_CONTEXT_MGR already set [ 276.482427] binder: BINDER_SET_CONTEXT_MGR already set [ 276.494709] binder: 15241:15246 ioctl 40046207 0 returned -16 [ 276.494994] binder: BINDER_SET_CONTEXT_MGR already set 15:33:58 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 276.500920] binder: 15239:15245 ioctl 40046207 0 returned -16 [ 276.506615] binder_alloc: 15230: binder_alloc_buf, no vma [ 276.525815] binder: 15230:15242 ioctl 40046207 0 returned -16 [ 276.532042] binder_alloc: 15230: binder_alloc_buf, no vma [ 276.532052] binder: 15230:15248 transaction failed 29189/-3, size 24-8 line 3254 [ 276.532157] binder: 15230:15236 got transaction to invalid handle [ 276.537957] binder: 15241:15246 transaction failed 29189/-3, size 24-8 line 3254 15:33:58 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 276.545922] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.552237] binder_alloc: 15230: binder_alloc_buf, no vma [ 276.559349] binder: release 15230:15236 transaction 712 out, still active [ 276.578054] binder: 15230:15236 transaction failed 29201/-22, size 0-0 line 3117 [ 276.581896] binder: 15241:15256 got transaction to invalid handle [ 276.592050] binder: unexpected work type, 4, not freed [ 276.593255] binder: 15239:15252 transaction failed 29189/-3, size 0-0 line 3254 15:33:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000009c14a15b1068e9d200000066d687b8a6b2778a6f015b832efae1955edfc9f620e292410d3f2edcf258235648b9c52f28a31c6a08d6e65d6177b52f47c92362cd80b299b25e363c4e1fb2ec3eef26936687cd5299ec453ef93b62369a05f01a359d131bed980963f4e62d31751d0961a8214e1253ad65a357e556b06e132654668b6122785e67636743ff21c3ce20b2c4e672f004006016af77afd250bfe36fb0f2ae90574310"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:58 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 276.611927] binder: 15241:15256 transaction failed 29201/-22, size 0-0 line 3117 [ 276.622713] binder: undelivered TRANSACTION_COMPLETE [ 276.635070] binder: BINDER_SET_CONTEXT_MGR already set [ 276.641671] binder: 15239:15245 ioctl 40046207 0 returned -16 [ 276.648304] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.664488] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.673404] binder: 15261:15263 got transaction to invalid handle [ 276.681002] binder: send failed reply for transaction 712, target dead [ 276.696053] binder: 15261:15263 transaction failed 29201/-22, size 0-0 line 3117 [ 276.706274] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.714953] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.725160] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.726236] binder_alloc: binder_alloc_mmap_handler: 15261 20001000-20004000 already mapped failed -16 [ 276.740622] binder: BINDER_SET_CONTEXT_MGR already set [ 276.745915] binder: 15261:15263 ioctl 40046207 0 returned -16 [ 276.751942] binder_alloc: 15261: binder_alloc_buf, no vma [ 276.757499] binder: 15261:15268 transaction failed 29189/-3, size 24-8 line 3254 [ 276.765315] binder: 15261:15263 got transaction to invalid handle [ 276.765601] binder: send failed reply for transaction 722 to 15261:15263 [ 276.771952] binder: 15261:15263 transaction failed 29201/-22, size 0-0 line 3117 [ 276.778628] binder: undelivered TRANSACTION_COMPLETE [ 276.791654] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.797140] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.802758] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.808263] binder: undelivered TRANSACTION_ERROR: 29189 15:33:59 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:33:59 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x90000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x0, 0x3, 0x7fffffff, 0x2, 0x3}, 0x28e, 0xffffffffffff9bae}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffff) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x1, 0xffffffffffffff81}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1d0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffd7e, 0x0, 0x0}) 15:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x239149bb}) fallocate(r2, 0x0, 0x100000, 0xc823) fallocate(r2, 0x20, 0x10000, 0x100008000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0063404000000000000000000000000000f3c0be65916206c2162cb272ef00000000000000000000000000000000000000180000000000000008000000000000003ad55ea2a5cf05498179ccf498548677091c6a0bcb5078c15cc30e277af14d7efb9ca2a14e9b29db15acc357587d8ce4698d027b9c96bf00", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r3 = epoll_create(0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf={0x14, &(0x7f0000000100)="b3dbbf65647a61b3606c6f50757d6508a50853fb"}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0x20000010}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) r7 = dup3(r0, r1, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000480)="0dc84dd0cdefd0f4713c31a50dcafabf8ec4063509cba2de7543ea3c6fe9918fd6f3acf362181cb6c4103194d61ce5790f25f9ca3895d4b6080cd795b5aac03a7ef53d109d7c55a43a93333f72a128124f367ce0a60fefc583daa086209d61346f772b1a1a796cb8866e7ef4827152aa03a3838f70744752879e17a49c75ee726ebce079") setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000240)={{0x4, @broadcast, 0x4e21, 0x0, 'nq\x00', 0x20, 0xfffffffffffffff9, 0x67}, {@multicast1, 0x4e23, 0x3, 0x8, 0x8, 0xfffffffffffffffa}}, 0x44) 15:33:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:33:59 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 277.235080] binder: 15273:15281 BC_FREE_BUFFER u0000000000000000 no match [ 277.241505] binder: BINDER_SET_CONTEXT_MGR already set [ 277.255087] binder: 15274:15282 ioctl 40046207 0 returned -16 [ 277.260094] binder: BINDER_SET_CONTEXT_MGR already set [ 277.262134] binder: 15274:15282 ioctl 4b48 20000000 returned -22 [ 277.266283] binder: 15277:15283 ioctl 40046207 0 returned -16 [ 277.269513] binder: 15277:15283 got transaction to invalid handle 15:33:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) r7 = dup3(r0, r1, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000480)="0dc84dd0cdefd0f4713c31a50dcafabf8ec4063509cba2de7543ea3c6fe9918fd6f3acf362181cb6c4103194d61ce5790f25f9ca3895d4b6080cd795b5aac03a7ef53d109d7c55a43a93333f72a128124f367ce0a60fefc583daa086209d61346f772b1a1a796cb8866e7ef4827152aa03a3838f70744752879e17a49c75ee726ebce079") setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000240)={{0x4, @broadcast, 0x4e21, 0x0, 'nq\x00', 0x20, 0xfffffffffffffff9, 0x67}, {@multicast1, 0x4e23, 0x3, 0x8, 0x8, 0xfffffffffffffffa}}, 0x44) [ 277.288652] binder: 15274:15282 unknown command 0 15:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x326) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_UNALIGN(0x6, 0x1) r3 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x0}) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0xf4, 0x0, &(0x7f00000004c0)=[@dead_binder_done={0x40086310, 0x1}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000100)=[@flat={0x2153c77f583ee4b3, 0xb, r3, 0x1}, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000140)=[0x38, 0x38, 0x0, 0x78, 0x20, 0x48]}, 0x9}}, @request_death={0x400c630e, 0x1, 0x4}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000180)=[@fda={0x66646185, 0x6, 0x2, 0x2b}], &(0x7f00000001c0)=[0x30]}}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)=[@flat={0x77682a85, 0x1, r4}, @flat={0x77622a85, 0x1, r5}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x3, 0x18}], &(0x7f0000000380)=[0x0, 0x0, 0x28]}}, @enter_looper], 0xdf, 0x0, &(0x7f00000005c0)="20f0c1fecee98582e798196c90977ae10248b11a71d9dda92adbdff53a24850de412f648438717a9e6ea80e2cd95732e144d17798cc26f496ce593ea273ac21bff6b41159988e4919ea638107c07175dfa56c8d2ce87379c1d8381cbdae9c9d0ee8142e2e177ee7503ace080e7daf9e1d073a34a8f00dee8f2d44a89e508897327ed49908c8941644f6ea424ade5ad351df474f9d429f0aa36ea3e05b2fe2e28311390de8691846aeadf123aa0a1b1872d912f912423e115d48c4e5ae5943dcf7a8be44076343510f6287bc22225ec8c32b04d1ae87542c99ab6925d698f10"}) 15:33:59 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 277.309808] binder: 15274:15282 ioctl c0306201 200000c0 returned -22 [ 277.316242] binder: 15277:15283 transaction failed 29201/-22, size 0-0 line 3117 [ 277.339681] binder: BINDER_SET_CONTEXT_MGR already set [ 277.345453] binder: 15277:15283 ioctl 40046207 0 returned -16 15:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x326) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_UNALIGN(0x6, 0x1) r3 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x0}) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0xf4, 0x0, &(0x7f00000004c0)=[@dead_binder_done={0x40086310, 0x1}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000100)=[@flat={0x2153c77f583ee4b3, 0xb, r3, 0x1}, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000140)=[0x38, 0x38, 0x0, 0x78, 0x20, 0x48]}, 0x9}}, @request_death={0x400c630e, 0x1, 0x4}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000180)=[@fda={0x66646185, 0x6, 0x2, 0x2b}], &(0x7f00000001c0)=[0x30]}}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)=[@flat={0x77682a85, 0x1, r4}, @flat={0x77622a85, 0x1, r5}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x3, 0x18}], &(0x7f0000000380)=[0x0, 0x0, 0x28]}}, @enter_looper], 0xdf, 0x0, &(0x7f00000005c0)="20f0c1fecee98582e798196c90977ae10248b11a71d9dda92adbdff53a24850de412f648438717a9e6ea80e2cd95732e144d17798cc26f496ce593ea273ac21bff6b41159988e4919ea638107c07175dfa56c8d2ce87379c1d8381cbdae9c9d0ee8142e2e177ee7503ace080e7daf9e1d073a34a8f00dee8f2d44a89e508897327ed49908c8941644f6ea424ade5ad351df474f9d429f0aa36ea3e05b2fe2e28311390de8691846aeadf123aa0a1b1872d912f912423e115d48c4e5ae5943dcf7a8be44076343510f6287bc22225ec8c32b04d1ae87542c99ab6925d698f10"}) 15:33:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) r7 = dup3(r0, r1, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000480)="0dc84dd0cdefd0f4713c31a50dcafabf8ec4063509cba2de7543ea3c6fe9918fd6f3acf362181cb6c4103194d61ce5790f25f9ca3895d4b6080cd795b5aac03a7ef53d109d7c55a43a93333f72a128124f367ce0a60fefc583daa086209d61346f772b1a1a796cb8866e7ef4827152aa03a3838f70744752879e17a49c75ee726ebce079") setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000240)={{0x4, @broadcast, 0x4e21, 0x0, 'nq\x00', 0x20, 0xfffffffffffffff9, 0x67}, {@multicast1, 0x4e23, 0x3, 0x8, 0x8, 0xfffffffffffffffa}}, 0x44) [ 277.353960] binder: release 15277:15292 transaction 734 out, still active [ 277.370390] binder: BINDER_SET_CONTEXT_MGR already set [ 277.385969] binder: 15274:15295 ioctl 40046207 0 returned -16 [ 277.397668] binder: unexpected work type, 4, not freed [ 277.405998] binder: 15274:15295 ioctl 4b48 20000000 returned -22 [ 277.415989] binder: 15274:15282 unknown command 0 [ 277.421305] binder: 15274:15282 ioctl c0306201 200000c0 returned -22 [ 277.426679] binder: undelivered TRANSACTION_COMPLETE [ 277.438760] binder: release 15274:15282 transaction 733 out, still active [ 277.457020] binder: undelivered TRANSACTION_COMPLETE [ 277.468532] binder: release 15274:15282 transaction 737 out, still active [ 277.476409] binder: undelivered TRANSACTION_COMPLETE [ 277.481660] binder: undelivered TRANSACTION_ERROR: 29201 [ 277.487133] binder: release 15277:15283 transaction 729 out, still active [ 277.494330] binder: unexpected work type, 4, not freed [ 277.499612] binder: undelivered TRANSACTION_COMPLETE 15:34:00 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000002440)=""/4096) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="4096cd91b39600003d175a3dd20cfcfb8bddf13de36e0e97e9ba673d8d05dc19103c52bce0582df5002ded1dd4961be0bfc491e0c31155e0b69cb094f7fa7235e9c83f85c306056c0e849a5a599df881bc07aa0dc5fb6fc195699bc01eb90bd1c530a3d130499b3783066b9803c90a6ea16c1c32", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x326) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_UNALIGN(0x6, 0x1) r3 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x0}) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0xf4, 0x0, &(0x7f00000004c0)=[@dead_binder_done={0x40086310, 0x1}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000100)=[@flat={0x2153c77f583ee4b3, 0xb, r3, 0x1}, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000140)=[0x38, 0x38, 0x0, 0x78, 0x20, 0x48]}, 0x9}}, @request_death={0x400c630e, 0x1, 0x4}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000180)=[@fda={0x66646185, 0x6, 0x2, 0x2b}], &(0x7f00000001c0)=[0x30]}}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)=[@flat={0x77682a85, 0x1, r4}, @flat={0x77622a85, 0x1, r5}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x3, 0x18}], &(0x7f0000000380)=[0x0, 0x0, 0x28]}}, @enter_looper], 0xdf, 0x0, &(0x7f00000005c0)="20f0c1fecee98582e798196c90977ae10248b11a71d9dda92adbdff53a24850de412f648438717a9e6ea80e2cd95732e144d17798cc26f496ce593ea273ac21bff6b41159988e4919ea638107c07175dfa56c8d2ce87379c1d8381cbdae9c9d0ee8142e2e177ee7503ace080e7daf9e1d073a34a8f00dee8f2d44a89e508897327ed49908c8941644f6ea424ade5ad351df474f9d429f0aa36ea3e05b2fe2e28311390de8691846aeadf123aa0a1b1872d912f912423e115d48c4e5ae5943dcf7a8be44076343510f6287bc22225ec8c32b04d1ae87542c99ab6925d698f10"}) 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000480)="0dc84dd0cdefd0f4713c31a50dcafabf8ec4063509cba2de7543ea3c6fe9918fd6f3acf362181cb6c4103194d61ce5790f25f9ca3895d4b6080cd795b5aac03a7ef53d109d7c55a43a93333f72a128124f367ce0a60fefc583daa086209d61346f772b1a1a796cb8866e7ef4827152aa03a3838f70744752879e17a49c75ee726ebce079") 15:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffff25, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2e1, 0x0, 0x0}) [ 278.036456] binder: send failed reply for transaction 729, target dead [ 278.043305] binder: send failed reply for transaction 733, target dead [ 278.056313] binder: send failed reply for transaction 734, target dead [ 278.075429] binder: send failed reply for transaction 737, target dead 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00\xcbh\xb2\xa2\x11n\x1e\xdd\xe2g\x96\xca`\xdd\xec?\bm\t\x10:\xe8\x05&\xbe\xea\xe3\xbcm;\xc2D}.\xaa\xcf\x88\xf4') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 278.083197] binder: 15307:15313 BC_FREE_BUFFER u0000000000000000 no match [ 278.087736] binder: 15306:15317 ioctl c0306201 200000c0 returned -14 [ 278.098590] binder: BINDER_SET_CONTEXT_MGR already set [ 278.111154] binder: 15308:15318 ioctl 40046207 0 returned -16 [ 278.121067] binder: BINDER_SET_CONTEXT_MGR already set 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:00 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 278.138860] binder: 15306:15319 ioctl 40046207 0 returned -16 [ 278.144294] binder_alloc: 15306: binder_alloc_buf, no vma [ 278.156245] binder: 15306:15317 ioctl c0306201 200000c0 returned -14 [ 278.171289] binder: 15308:15318 transaction failed 29189/-3, size 24-8 line 3254 15:34:00 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000000080)='ns/net\x00'}, 0x30) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/n\x17m\xb1') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r0}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) [ 278.184884] binder: 15326:15330 BC_FREE_BUFFER u0000000000000000 no match [ 278.195853] binder: 15308:15331 got transaction to invalid handle [ 278.220018] binder: 15308:15331 transaction failed 29201/-22, size 0-0 line 3117 [ 278.258887] binder: 15336:15341 ioctl 541b 20000040 returned -22 [ 278.267464] binder_alloc: binder_alloc_mmap_handler: 15308 20001000-20004000 already mapped failed -16 [ 278.274176] binder: 15336:15341 got transaction to context manager from process owning it [ 278.283815] binder: BINDER_SET_CONTEXT_MGR already set [ 278.287056] binder: 15336:15341 transaction failed 29201/-22, size 0-0 line 3108 [ 278.297646] binder: 15308:15318 ioctl 40046207 0 returned -16 [ 278.301375] binder: 15336:15341 ioctl 541b 20000040 returned -22 [ 278.304834] binder_alloc: 15336: binder_alloc_buf, no vma [ 278.311971] binder: BINDER_SET_CONTEXT_MGR already set [ 278.323543] binder: 15336:15346 got transaction to context manager from process owning it [ 278.324911] binder: 15308:15331 transaction failed 29189/-3, size 24-8 line 3254 [ 278.335108] binder: 15336:15345 ioctl 40046207 0 returned -16 [ 278.341058] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.349235] binder: 15336:15346 transaction failed 29201/-22, size 0-0 line 3108 15:34:00 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) dup3(r0, r1, 0x0) 15:34:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xa4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)) r0 = getpgid(0x0) r1 = getpgid(r0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000003140)='ns/mnt\x00') fcntl$getownex(r2, 0x10, &(0x7f0000000000)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000005400)='ns/ipc\x00') [ 278.359073] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.397243] binder: BINDER_SET_CONTEXT_MGR already set 15:34:00 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063424000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d732664d792efcce3b98c056fa50d7e139c903762e7db3c10847b828939dc97b8fff5906232dda81da2f242abbb6e0c41f7d8dce56e24506b67c42b6058edf729d1f8552f4f2c2345a1e00d7349c3f6dc4ea9d8aac6472692a35f1d4296137bd575ae9fc0f"], 0x0, 0x0, 0x0}) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) dup3(r0, r1, 0x0) [ 278.406900] binder: 15353:15355 ioctl 40046207 0 returned -16 [ 278.410262] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.422702] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.424302] binder: 15353:15355 transaction failed 29189/-22, size 24-8 line 3117 15:34:00 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x2) [ 278.468718] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.481742] binder: 15353:15369 got transaction to invalid handle [ 278.494118] binder: 15361:15368 unknown command 1078092544 [ 278.501377] binder: 15353:15369 transaction failed 29201/-22, size 0-0 line 3117 [ 278.505196] binder: 15361:15368 ioctl c0306201 200000c0 returned -22 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000080)={&(0x7f0000000180)=""/178, 0xb2}) dup3(r0, r1, 0x0) [ 278.514601] binder: BINDER_SET_CONTEXT_MGR already set [ 278.522280] binder: 15353:15355 ioctl 40046207 0 returned -16 [ 278.528536] binder: 15353:15369 got transaction to invalid handle [ 278.547617] binder_alloc: 15361: binder_alloc_buf, no vma 15:34:00 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r1 = dup2(r0, r0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 278.561180] binder: 15353:15369 transaction failed 29201/-22, size 0-0 line 3117 [ 278.564527] binder: BINDER_SET_CONTEXT_MGR already set [ 278.595773] binder: 15353:15355 transaction failed 29189/-3, size 24-8 line 3254 [ 278.600307] binder: 15361:15380 ioctl 40046207 0 returned -16 [ 278.603748] binder: undelivered TRANSACTION_ERROR: 29201 15:34:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:00 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 3: r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/mnt\x00') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r3 = dup2(r1, r2) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x80000000000, {{0xa, 0x4e20, 0x6, @mcast2, 0x200}}}, 0x88) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x4) 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000400)={0x9, 0x1f, {0x52, 0xa6, 0xf9bc, {0x5, 0x6}, {0x5, 0x2}, @period={0x5a, 0xe4b4, 0x81, 0x0, 0x55b8, {0xfffffffffffffff7, 0x9, 0x0, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x1, 0x9, 0x4, 0x800]}}, {0x51, 0x5, 0x3ff, {0x401, 0x4}, {0x8, 0xdf2}, @period={0x5a, 0x67d00000000000, 0x3, 0x7fff, 0x8, {0x9, 0x7f, 0x1, 0x7}, 0x3, &(0x7f00000002c0)=[0x804b, 0x30634392, 0x835]}}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) fcntl$dupfd(r0, 0x0, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) fsetxattr(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d2e2f6465762f62696e6465722300381e4ff3fe04d3aaf28e541c13980826701d3d0dd53f5ebb5af50f7c69b64c59d3efd3f958119d8d1cc8e80358be7059a197c2a82c803776b054159cc9843c1037e446e22a1be8eeefc7c3ade4fdfbd6761efa9d9eaf3ae3251c3f91f354a44978cf43d28ecef7084820b007229aaa9229ea845bd19683d771e590f2f2b5c72153ce4f82ef6d74"], &(0x7f0000000140)='system\x00', 0x7, 0x1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340401f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007fffe500000000000000000000"], 0x0, 0x0, 0x0}) [ 278.609653] binder: 15361:15368 unknown command 1078092544 [ 278.635410] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.654021] binder: 15361:15368 ioctl c0306201 200000c0 returned -22 [ 278.662164] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.700858] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.734448] binder_alloc: 15399: binder_alloc_buf, no vma 15:34:00 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:00 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0xb4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') accept$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 278.745462] binder: 15399:15406 transaction failed 29189/-3, size 0-0 line 3254 [ 278.745938] binder: BINDER_SET_CONTEXT_MGR already set [ 278.755593] binder_alloc: binder_alloc_mmap_handler: 15399 20001000-20004000 already mapped failed -16 [ 278.768841] binder: 15397:15403 ioctl 40046207 0 returned -16 [ 278.771154] binder: 15397:15403 got transaction to invalid handle 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r0, r0, 0x80000) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 278.795032] binder: 15397:15403 transaction failed 29201/-22, size 0-0 line 3117 [ 278.801149] binder: BINDER_SET_CONTEXT_MGR already set [ 278.820505] binder: 15399:15406 ioctl 40046207 0 returned -16 [ 278.835658] binder: BINDER_SET_CONTEXT_MGR already set 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 278.859224] binder: 15397:15421 ioctl 40046207 0 returned -16 [ 278.873137] binder_alloc: 15399: binder_alloc_buf, no vma [ 278.883471] binder: 15397:15403 got transaction to invalid handle [ 278.883621] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.892663] binder: 15397:15403 transaction failed 29201/-22, size 0-0 line 3117 [ 278.904535] binder: 15399:15424 transaction failed 29189/-3, size 24-8 line 3254 [ 278.905181] binder: 15399:15406 got transaction to invalid handle [ 278.937820] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.949012] binder: 15399:15406 transaction failed 29201/-22, size 0-0 line 3117 15:34:00 executing program 0: r0 = dup(0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="704e2453b39a2df7f71ea0806acf7396"}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3a3d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6c1feba3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x50}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4004840) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000002c0)=0x9) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000440)="3e80be8ecd97ab4dcf94934fd33fe31208d411481bbc1ece7d841ba2247d5b7ebf33e9ab2aba153b020035b02e6338861d325190c653009a2c9160621fcc2ef5029ae64704db55e98cf6f1e241c36ed1de737c46a4b8d6de0fc16ce87dd90f64c751b816bd8a2cb4c9c9fe4aa389467500cca43fc189985c4bf3c8041c1d591b86600bd161a129e2259ff0933152cd42b802177cde770b7ba5", 0x99}, {&(0x7f0000000500)="6af8f3567d402777f0873bb77badebc3d4231add62dc89c924220ca5377eb01fa9c9e196ae8a508903a118f8ce86d648b208e1a762b3017b5a043abcab437d66e41c68fd4f5a56e5fd74d3a68739cce528066845d0400794ca7ee4b50220fad555338a1b5c0bcc392cc53661a4d297e01d0263a42b1e43cfe4ad4e47fe648b8ec18928ab608d98174e87caa368d7deb99ba53a6329cdf9e51beb507fd6d0e9efbcff296929ef629b2cfed706068a942a6c8d6e9a11355716bca3c32a9930", 0xbe}, {&(0x7f00000005c0)="fbf5bc2b80dcc1da0335ff7684ec08af9db879575399e0eaeb59c90c879e3e2ce1eeb29768efdbd453de435f4c9adf03ca56d1a000e4343e8efaa697bac10016c541192c981f0200239a87a994a1839634ba55f35e5f9d89b7b8fa51d16a47d8d406dd20fa7cc44f2dc09acae4b677c9563c1c4d1960908f6d685085fa7429f332f3c30c1bab0596d1a83ab2ba36c587e9dac5b516592f905dac701bbfbc8845", 0xa0}, {&(0x7f0000000680)="95c54d6b5a173c9773726e1f2808ceb71354296cb99695a9f877bb4f3392d36d3b59c6d0c7654ee1e6fdd509381b062ddec8db71adddb5c69d4103e99602853d874f89dfe0168633eca64803689b0a78550aee32d060b58cc9508cb7ce4c27ac1acfc325ae67", 0x66}, {&(0x7f0000000700)="2c7fc693831cfd913dc8f77df9d1b284922710850a1c78ad41ffc39b002668954238cca264670be4e8f9b52fd4ee0bd4bfafbaac31bf596b8748e80f456db25a889c02c38597208da9dec4bbd601aa48157d1f5ca69881a6ab741c27b66b82c4501b0dd11e4a06aac5393e4de8890b8d92e9d2942372c27d59ebc132b84f8eef758ea57cc075acc62397897ca14d4d99be78a1be7b3f5805dd8e49b6cb14281d078390ac5f8f6e421f8f728d67bc7316239217e8099f7c4263dd2d0dd28f", 0xbe}, {&(0x7f00000007c0)="bf6e58143935213cd420d50122f9246363b926a119558834aed8e680843c006a262beffe48557e8ee3535ec4cb8853e67b9e36f2b7668321431af806c25a5e6130a9b931f152cb5e9fa7d3fcafeff74aba4050bb2f7c8b2a55167f489d3a8a624bc2b6c06e4545a6271aaeec7ffd397e31f4ccccce91fa478326b407dbf49569e91c471bcbd18ec39d048bd26f06e2cddd3cfdb841c2a06a6ab9c7f1d5782e351d2cbc151ff0d53f8c5f078180780a638f48efbfd1e16f99a10d922c2be8582772ec9debf413c3618d294f2d5fe6", 0xce}], 0x6) 15:34:00 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x81) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') prctl$PR_SVE_GET_VL(0x33, 0xf17e) 15:34:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r0, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:00 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() times(&(0x7f00000007c0)) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x2}, [{0x2, 0x2, r1}, {0x2, 0x1, r2}, {0x2, 0x3}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}], {}, [{0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x2, r9}], {0x10, 0x3}, {0x20, 0x2}}, 0x6c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) 15:34:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:00 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 278.957377] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.972491] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.978071] binder: undelivered TRANSACTION_ERROR: 29189 [ 278.986442] binder: send failed reply for transaction 751 to 15399:15406 [ 278.993734] binder: undelivered TRANSACTION_COMPLETE 15:34:01 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 279.006733] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.025301] binder: 15436:15443 got transaction to context manager from process owning it [ 279.045389] binder: 15436:15443 transaction failed 29201/-22, size 0-0 line 3108 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:01 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 279.075447] binder: BINDER_SET_CONTEXT_MGR already set 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:01 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000), 0x4) [ 279.101375] binder: 15441:15457 ioctl 1 200002c0 returned -22 [ 279.124246] binder_alloc: 15436: binder_alloc_buf, no vma [ 279.130967] binder: 15436:15452 ioctl 40046207 0 returned -16 [ 279.134324] binder: BINDER_SET_CONTEXT_MGR already set [ 279.145230] binder: 15436:15462 transaction failed 29189/-3, size 0-0 line 3254 [ 279.152577] binder: 15441:15447 ioctl 40046207 0 returned -16 [ 279.163326] binder_alloc: 15436: binder_alloc_buf, no vma [ 279.167529] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.179905] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.181377] binder: 15441:15447 transaction failed 29189/-3, size 24-8 line 3254 15:34:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl(r1, 0x7, &(0x7f0000000680)="743c764f3f25b5ecdafb7b4a0dfef2b4bb1fd6d006560a847f1f41f4b0271057") epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:01 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 15:34:01 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0x50, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0xfe74, &(0x7f0000000240)='\x00', r3}, 0x23) syz_open_procfs$namespace(r4, &(0x7f0000005400)='ns/net\x00') r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f00000000c0)=0x3) fcntl$getown(r5, 0x9) [ 279.232319] binder: 15441:15457 ioctl 1 200002c0 returned -22 [ 279.238345] binder_alloc: binder_alloc_mmap_handler: 15441 20001000-20004000 already mapped failed -16 [ 279.249154] binder: 15441:15457 transaction failed 29189/-22, size 24-8 line 3117 [ 279.257697] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.263738] binder: undelivered TRANSACTION_ERROR: 29189 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 279.303061] binder: 15482:15486 got transaction to context manager from process owning it [ 279.315828] binder: BINDER_SET_CONTEXT_MGR already set [ 279.316016] binder: 15482:15486 transaction failed 29201/-22, size 0-0 line 3108 [ 279.323164] binder: 15483:15489 ioctl 40046207 0 returned -16 15:34:01 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 279.347615] binder: 15483:15489 got transaction to invalid handle [ 279.359878] binder: BINDER_SET_CONTEXT_MGR already set [ 279.382437] binder: 15483:15489 transaction failed 29201/-22, size 0-0 line 3117 [ 279.386040] binder: 15482:15495 ioctl 40046207 0 returned -16 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 279.398630] binder_alloc: 15482: binder_alloc_buf, no vma [ 279.406320] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.412157] binder: 15482:15486 transaction failed 29189/-3, size 0-0 line 3254 [ 279.420852] binder_alloc: binder_alloc_mmap_handler: 15483 20001000-20004000 already mapped failed -16 [ 279.446495] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.465035] binder: 15483:15504 got transaction to invalid handle 15:34:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00003032ad56cbb6"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x3d, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x3, 0x800, 0xffa, 0x4, 0x6, 0x2, 0x2, 0x8000, 0x7, 0x3f, 0x5, 0x100000001}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r3) 15:34:01 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/status\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) readv(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/178, 0xb2}], 0x8) write$input_event(r0, &(0x7f00000005c0)={{r1, r2/1000+30000}, 0x16, 0xfffffffffffffffd, 0x8}, 0x18) r3 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000600)='ns/net\x00') 15:34:01 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000abc3d6497ee965a616b1af40955580e6af6dcacb24ff8ea67bd60e4bad104899602121c1dfabe7f41e02b50b315b5c6c34944d32e99812b0aeda9c8ca195de9baa5ad010ecfda7bb29755cf7760ce5d7ab42d2951a6c3934f0b186658417b055e800620151bea03f9fc71d6d319f7f3c644b679457a4f29a13716c191ab4eeca4c6bf21f2bfea4847717043df7749068181625cc7b7667b734c7715cecaf0a4f6efc9722708a245915da8a2981f4b6bd6245448418b7965d9e2dc6beb88fd5942fc213612f106c9f429a5eddd106f7c5ee7054a7e89f7ce91e4ec09ebb2bdd4540691e40efc5be62eb2282f4f3e84b5253"], 0x0, 0x0, 0x0}) 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) r4 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 279.506012] binder: 15483:15504 transaction failed 29201/-22, size 0-0 line 3117 [ 279.514873] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.520633] binder: undelivered TRANSACTION_ERROR: 29201 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 15:34:01 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid_for_children\x00') r2 = open(&(0x7f0000000000)='./file0\x00', 0x80080, 0x14) flistxattr(r1, &(0x7f0000000180)=""/213, 0xd5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x6, 0x7b, 0x2}, 0x7) getpgrp(r3) 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 279.556234] binder: 15520:15526 ioctl c0306201 0 returned -14 [ 279.562132] binder: 15518:15524 transaction failed 29189/-22, size 0-0 line 3117 [ 279.572903] binder: 15516:15528 unknown command 0 [ 279.587177] binder: 15516:15528 ioctl c0306201 200000c0 returned -22 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000012000)={&(0x7f0000000440)=@ipv6_getroute={0x1060, 0x1a, 0x8, 0x70bd2a, 0x25dfdbff, {0xa, 0x10, 0x80, 0x2, 0xfd, 0x1, 0xfd, 0x0, 0x400}, [@RTA_METRICS={0x1004, 0x8, "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"}, @RTA_PREF={0x8, 0x14, 0x8}, @RTA_OIF={0x8, 0x4, r3}, @RTA_METRICS={0x1c, 0x8, "8ea97bbbce8313d29fc7643b2dc9725536c8f4956573f757"}, @RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x1060}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="793fd959f9dc92a393383050acbb74082db3e41ef45aae281f86633c53331506177661b09feaba2044819b89f33ce3cfd2fedb46dc255f5d7f64f98b10fc3c2c28f683470a49a6986f5afedb6d7802c8df5a930480d54a26", 0x58}, {&(0x7f0000000180)="943aba39753a2f772cc5aa82131318f60dea59f4c531e58c5e0d082b91db14267786123687eed48e2e7b4f85f61764cd0b3153a53823ac44610631dd03bba4fe09d9c0302240ab190f918fb64e30d5d0c93a088b2d8be5fdbbdd2a7015bdb9a82bd1f7efb4516c21012d2d1ca367dfad93b41b364a647f650f114a9f53372d20d64fa173c00bc3249859df72cc90b9df5a73211f7cddc4036612befb4b0547b32a0a", 0xa2}, {&(0x7f0000000240)="1bb5f6e22c4a4ea353e19292e8572050ba7b9197f9387b5ac0016ad0d0e820c06fc10b89118f6d209438a0182b1d8081f936a160552461d1258279101a5c55f9f49f7952ad945926cfdc50a8955f6a38c44b670d6c635f812398dbf2922ada480c63734a9bdd7377ed3b", 0x6a}], 0x3, 0xc) 15:34:01 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') [ 279.612357] binder: 15516:15528 ioctl 5429 20000100 returned -22 [ 279.615221] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.643418] binder_alloc: binder_alloc_mmap_handler: 15516 20001000-20004000 already mapped failed -16 [ 279.674649] binder: BINDER_SET_CONTEXT_MGR already set [ 279.680994] binder: 15542:15547 ioctl c0306201 0 returned -14 [ 279.688463] binder: 15539:15544 ioctl 40046207 0 returned -16 [ 279.690679] binder: BINDER_SET_CONTEXT_MGR already set [ 279.708257] binder_alloc: 15516: binder_alloc_buf, no vma [ 279.714247] binder: 15516:15538 transaction failed 29189/-3, size 24-8 line 3254 [ 279.717368] binder_alloc: 15516: binder_alloc_buf, no vma [ 279.729532] binder: 15516:15528 ioctl 40046207 0 returned -16 [ 279.736198] binder: 15539:15544 transaction failed 29189/-3, size 0-0 line 3254 [ 279.738219] binder: 15516:15550 unknown command 3 [ 279.748967] binder: 15516:15550 ioctl c0306201 200000c0 returned -22 [ 279.757033] binder: BINDER_SET_CONTEXT_MGR already set [ 279.762802] binder: 15516:15528 ioctl 5429 20000100 returned -22 [ 279.766224] binder: 15539:15553 ioctl 40046207 0 returned -16 15:34:01 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000001b00)={{0x73, @rand_addr=0x400, 0x4e21, 0x0, 'rr\x00', 0x4, 0x40, 0xc}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4e23, 0x2000, 0x4, 0x8}}, 0x44) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x26, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 15:34:01 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80, 0x800) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="14000600bb0b000000080000040000004700000014000600b203000010000000060000000000a00014000100ff02000000000000000000000000000114000100f4b2f8872b192344b3c62affc399393014000100ff01000000000000000000000000000114000100ff0100000000000000000000000000011400010000000000000000000000ffffe00000010800080000000000140006001100000001000100050000007f0000001400060006000000010000000500000081000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 279.774437] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.781022] binder_alloc: 15516: binder_alloc_buf, no vma [ 279.788087] binder: 15539:15553 transaction failed 29189/-3, size 0-0 line 3254 [ 279.791481] binder: send failed reply for transaction 773 to 15516:15528 15:34:01 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffffdf, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 15:34:01 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a00", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x4) [ 279.825466] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.848955] binder: 15558:15564 ioctl c0306201 0 returned -14 [ 279.856294] binder: undelivered TRANSACTION_ERROR: 29189 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 279.879272] binder: undelivered TRANSACTION_COMPLETE [ 279.897100] binder: BINDER_SET_CONTEXT_MGR already set [ 279.912115] binder: 15568:15574 ioctl 40046207 0 returned -16 [ 279.918217] binder: undelivered TRANSACTION_ERROR: 29189 15:34:01 executing program 3: r0 = getpid() pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 15:34:01 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) [ 279.939428] binder: BINDER_SET_CONTEXT_MGR already set [ 279.966960] binder: 15576:15578 ioctl 40046207 0 returned -16 15:34:01 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000003c0)={@local, 0x39, r3}) r4 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:01 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 279.989907] binder: 15576:15592 transaction failed 29189/-22, size 24-8 line 3117 [ 280.010833] binder: 15576:15578 got transaction to invalid handle 15:34:02 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) [ 280.035344] binder: 15591:15595 got transaction to context manager from process owning it [ 280.048582] binder: 15576:15578 transaction failed 29201/-22, size 0-0 line 3117 15:34:02 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x4, 0x401, 0x3, 0xe704, 0x2, [{0x8, 0xcd3, 0xdd81, 0x0, 0x0, 0x4}, {0x8, 0x5, 0x1, 0x0, 0x0, 0x8}]}) syz_open_procfs$namespace(r0, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 280.082868] binder: 15591:15595 transaction failed 29201/-22, size 0-0 line 3108 [ 280.097387] binder_alloc: binder_alloc_mmap_handler: 15576 20001000-20004000 already mapped failed -16 [ 280.110648] binder: BINDER_SET_CONTEXT_MGR already set [ 280.119950] binder: 15576:15578 ioctl 40046207 0 returned -16 [ 280.126724] binder_alloc: 15591: binder_alloc_buf, no vma [ 280.142832] binder: BINDER_SET_CONTEXT_MGR already set [ 280.148752] binder: 15591:15607 ioctl 40046207 0 returned -16 [ 280.150329] binder: 15576:15592 transaction failed 29189/-3, size 24-8 line 3254 [ 280.165190] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.175028] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.184770] binder: undelivered TRANSACTION_ERROR: 29189 15:34:02 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) r3 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:02 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') select(0x40, &(0x7f0000000000)={0x5, 0x6, 0x40, 0xb544, 0x4, 0xfffffffffffffff7, 0x2, 0x1}, &(0x7f0000000040)={0xfffffffffffffffb, 0x3d, 0x401, 0x8001, 0x2, 0x401, 0x8, 0x6}, &(0x7f0000000080)={0x100000001, 0xce, 0x7, 0x7ff, 0x383, 0x1f, 0x80, 0x6}, &(0x7f00000000c0)) 15:34:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x38, 0x0, &(0x7f0000000040)=[@dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x2, 0x1}, @acquire_done={0x40106309, r2, 0x3}, @exit_looper, @register_looper], 0x6a, 0x0, &(0x7f0000000100)="8b89244ee5fced465d85e04c90288016af8f5df213b1b58c2d3d1b73f4aa03d3aab35485d14cc4ff93b5344db73c84908003d63535ae11d43ad16037140fd027122c89d0b0b497f6dbb251091dd165e189dfd6a6ae6640fde84813d232168e22067512f2555185824428"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 280.185767] binder_alloc: 15591: binder_alloc_buf, no vma [ 280.195904] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.197479] binder: 15591:15595 transaction failed 29189/-3, size 0-0 line 3254 [ 280.211250] binder: undelivered TRANSACTION_ERROR: 29189 15:34:02 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:02 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '$'}, {0x20, 'ns/net\x00'}, {0x20, '!'}, {0x20, 'ns/net\x00'}], 0xa, "dcc35c8a07c3b90bdc65804c475f955eefbbc777eaf36d0863854a242b26d42435b048df03d0173021d9b5763ef4acb1155ad514c79e2a90e99f14cf65e7b987030c690d09d1abcda184cae225ce6901daece884aa697eaaf18db96c969be6cd9c61a2fe654e217e02398d1d4c09a09593dd0dcc91caf1ac299c5507206d"}, 0x9d) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') 15:34:02 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5f, 0x1, 0x80, 0x9, 0xffffffff}, 0xc) r3 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 280.279046] binder: 15627:15636 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 280.296174] binder: BINDER_SET_CONTEXT_MGR already set [ 280.306087] binder: 15635:15640 ioctl 40046207 0 returned -16 [ 280.317670] binder: 15627:15636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:02 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x400000, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000200)=0x7ff, 0x4) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7b}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) [ 280.334337] binder_alloc: 15627: binder_alloc_buf, no vma [ 280.337326] binder: BINDER_SET_CONTEXT_MGR already set [ 280.346182] binder: 15627:15636 BC_ACQUIRE_DONE u0000000000000000 node 788 cookie mismatch 0000000000000003 != 0000000000000000 [ 280.373163] binder: 15627:15645 transaction failed 29189/-3, size 0-0 line 3254 15:34:02 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000000)=0x54) r3 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 280.379086] binder: 15635:15646 ioctl 40046207 0 returned -16 [ 280.388164] binder: release 15635:15640 transaction 792 out, still active [ 280.397634] binder: undelivered TRANSACTION_COMPLETE [ 280.409413] binder: 15627:15636 ERROR: BC_REGISTER_LOOPER called without request [ 280.434287] binder: release 15635:15640 transaction 791 out, still active [ 280.468475] binder_alloc: binder_alloc_mmap_handler: 15627 20001000-20004000 already mapped failed -16 [ 280.469029] binder: undelivered TRANSACTION_COMPLETE [ 280.492296] binder: 15661:15667 BC_FREE_BUFFER u0000000000000000 no match [ 280.502116] binder: BINDER_SET_CONTEXT_MGR already set [ 280.502361] binder: 15627:15645 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 280.514713] binder: 15627:15636 ioctl 40046207 0 returned -16 [ 280.535324] binder_alloc: 15627: binder_alloc_buf, no vma [ 280.548148] binder: 15627:15636 got transaction to invalid handle [ 280.548421] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.558207] binder: 15627:15636 transaction failed 29201/-22, size 0-0 line 3117 [ 280.561181] binder: 15627:15668 transaction failed 29189/-3, size 24-8 line 3254 [ 280.579226] binder: send failed reply for transaction 787 to 15627:15645 [ 280.580330] binder: 15627:15645 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 15:34:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0x3, @local, 0x1}, {0xa, 0x4e23, 0x99, @ipv4={[], [], @multicast2}, 0x3}, 0x9e0, [0x4, 0x8001, 0x1, 0x96f7, 0x1, 0x5, 0x8, 0x5f9]}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = gettid() sched_getaffinity(r2, 0x1, &(0x7f0000000140)) 15:34:02 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x8) 15:34:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 280.587078] binder: send failed reply for transaction 791, target dead [ 280.595339] binder: 15627:15645 BC_ACQUIRE_DONE u0000000000000000 no match [ 280.601948] binder: send failed reply for transaction 792, target dead [ 280.609063] binder: 15627:15645 ERROR: BC_REGISTER_LOOPER called without request [ 280.616161] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.629645] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.635453] binder: undelivered TRANSACTION_COMPLETE 15:34:02 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80000) sync_file_range(r0, 0x9, 0x230c, 0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x7, 0x200, 0x945, 0x80, 0x617f40bf}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @rand_addr=0x3}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000100)='nr0\x00', 0x1, 0xe0000, 0x401}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0xc00, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 280.657352] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.661531] binder: 15677:15679 BC_FREE_BUFFER u0000000000000000 no match [ 280.675941] binder_alloc: 15672: binder_alloc_buf, no vma [ 280.676766] binder_alloc: 15678: binder_alloc_buf, no vma [ 280.689309] binder: 15678:15685 transaction failed 29189/-3, size 0-0 line 3254 [ 280.689646] binder: 15672:15681 transaction failed 29189/-3, size 0-0 line 3254 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:02 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 280.704374] binder_alloc: binder_alloc_mmap_handler: 15678 20001000-20004000 already mapped failed -16 [ 280.723061] binder: BINDER_SET_CONTEXT_MGR already set [ 280.726318] binder: BINDER_SET_CONTEXT_MGR already set [ 280.734134] binder_alloc: 15675: binder_alloc_buf, no vma [ 280.740971] binder: 15675:15682 transaction failed 29189/-3, size 0-0 line 3254 [ 280.747967] binder: 15672:15687 ioctl 40046207 0 returned -16 [ 280.752631] binder: 15678:15685 ioctl 40046207 0 returned -16 [ 280.763262] binder_alloc: 15672: binder_alloc_buf, no vma [ 280.767963] binder_alloc: 15678: binder_alloc_buf, no vma [ 280.769988] binder: 15672:15681 transaction failed 29189/-3, size 0-0 line 3254 [ 280.776255] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.789371] binder: send failed reply for transaction 798 to 15678:15685 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:02 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x600080, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f0000000500)=""/231, 0xe7, 0x0}}, 0xfffffffffffffe7b) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x10, &(0x7f0000000380)={&(0x7f0000000440)=""/160, 0xa0, r1}}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 280.801816] binder: 15678:15686 transaction failed 29189/-3, size 24-8 line 3254 [ 280.810268] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.820981] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.827397] binder: 15695:15699 BC_FREE_BUFFER u0000000000000000 no match [ 280.839022] binder: undelivered TRANSACTION_ERROR: 29189 15:34:02 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCNOTTY(r0, 0x5422) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0x2, 0x1}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1414007f00000100000000ac14140a000000000000000000000000"], 0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') clone(0x4000, &(0x7f0000000040)="d0614f74e70e233a9ddb72c4e50178d53faae1c7", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="1f20c7e7b49f206395ed3ea0803a5757a02102987b5dfb202c844df7aec4669c66979a970af77444a7768e5ad31abba6b093c6601b9e3605ea802fe36dfdef0e6f24905b6dfab741b61311fcda975a3f6cc8654a4c5254f325cf0e6fe230695738ca6aaf165b1e943e6c141a0c37cb29a212b819a5101bdb56e5f06e17d17285de70acde4aa89186") 15:34:02 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x3, 0x3}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 280.860697] binder: undelivered TRANSACTION_COMPLETE 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) vmsplice(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="b8943f6568d055e7e344d86f31de893cd150ceb6bebbb1514c077138ca5d9bcb24269790dd15a2f14ca17b1a6f607e9a8bc5499d995e5f7da740a2897ff7d7ca3bf7617499a83f177b828ca086fdac2ead06af0ff4394e4224204ebb9f4635ebcdefdcc1c21498620901d70b01927e866f9fb6dd73704a84c846ad02687ecdd47404ae5e04b016aed91350820e96a49137d05226839782f68e73f15d1dcf59d3514eee1af69964f0ff8812228908e78f695af5d775698a6f467c70151abe234da2", 0xc1}, {&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="25d097e878a084e138c89de0c4edb701155778266df5f0f007adbc4e5ec72872a8679c78ad79d8546b8713f3208e40eab235cf474219fce60c0cdb62ec6c0e2c1489984050885dd124e0bbf0b86f45c1d7241cbeb61cd94bbe7e32f68299ffa727bae3c143c0531c8ac9634ab65853c6ec78a413fa2ece870df636685c40ea638e8f4a46629f85217994dca1393ad3de230448a26e979d43651d67388c7f2e48d400ce85d55f00debb4f55caabe4388d01e79664d356ebb5722b349e828bdef0a2f8c04ff1abf011cca84c384ebb7198dbcde53393ed1d1980c8e52d9a28c5db26c4ed6262d81bb9364a5f1e94d39a5b86df92c369a5aedc971ad7c8244c08fb4240c5de3e53341803ba43887f385b843c9940e16d41e632e4a0476ab438f1666019088fd546084173164361df95987b982cff1e6f3cecc9b188576dc771dc2f05a8cf343842a10f089514c3f255c7030389f223af9605cee63f9fde3d5add1cbcf14069f243f530e3d9b7dcbcbb73fa038fcbcd199d1e9503d1eebf7da24cd86ccde14098c2ddbfcbfe4ae0cad9d60a6b0fcbcd3eb58fcd2f737c02fb8427f9fb56611e44b6fb870c4aa5dfe3d28519abc57daca068b54d826615b06d881206160fc394faf2fea761aa509b6e28e19a4170e22ab02b8ee678b6e1c5e66f821ceb690fa6cc91142a11dc94acc7a3975ed955b2691f6724393077b87206531ec33638629ca8addf0eb39ad13e807c5e23a5ef3f232dd4056d04bd6d7333cd768f0c10af87bee4372f203a7033392fea1baa8365652802dccca3e57b69f58b0c84d40d5280adfd18675b44c1d686e5f259e04b831866793a5ac0128ddc7fc0b4edd39b726ac334783e97832063cbf55cf3743517ae5ee334fcdea02816a4e52d1c62a0087847f1f1891c17c50f4dbd8dfe0d3c15245995a8e9cba760364cd805ea94034f1b569c86b4aeea6335714045fe1e1715173a1d01ba053f402779e279acd38e87c06cf4844017e5b0cc09c14fff7ebb23bdc3c87a0b9e9712acdc588b702a8cb645ca354c077b55571b00ba4ea520340c7e3d6ad57a487814212cf6eb6c5fa7da87c91f46e089854164573ee020abcc9d35f293635139e83854ca5f6d011b653f31cf1ee5d21551f6bb2ea466525df1444374dcfeb8f806680b5cff0b10df98e6c73e44bb12170204103c8fe7936366d1bb255bd9b082320ce5228ee03599a52ac16c9a923d14039a0c15db45f086147ce0abaa675cdfdeeed49cbd5cbc0c7cc4ecf46724a712210107ab3c60c54861bf78b433bba21173848c8129ed93a6dc704d66faa4b17edf6a528b14dc09738727feb25b6a6cf34dc9a1904f5d02ef5f81085b304ee594bd1bfde3ecdd7d3c9f5ca05e8a89881105a42e6e5599bbcd60fbbb80a1874609e877dc86b263f67ff559f5fa5a037c7bf858529f27b44afc8152503439f1e1c4ed58f8f3b20f9631dc547bef7e6dc8469f36afec6a44f72f6e609828f03bc4fb8a84a77cabf9af71fe90ef5d5d045e89f716dc2bb1c152bb6c9811d589070f948cb330aef45de4669202052f637eeb8ad0740a635b531dccc6027969046a8d4a54708d6281b28624d9c95896720896fa8277ced98b6a5101369b3bc4e3d988975012280487d9074071e2edeed134c78c8e8bf693b8c034d39be26c75cd9b16e7d3490b717483cddf2af5d7c7a15565c30cbcea134001afa4e6f2ea332b9a02f013b19597ec42d138070ee0eb8f2c2d86bcd3bfe310093f1d4517a3924f13a59fd615f2ecfc53a7f7e2845450298a53ed6a1ec4b58b9cf7face11af91810eb266df2dc993e426d26112998d6e36f4f7200515d1da6d5fe325b89dc16f74be84adf76b3f713b69c3b2522c2460a2fcd95c0e366000071b233b28445b25a96580b4e11217977a56e186c8ead67baa035088a8ade0269960bd8c4119cb2575440871cb34cb48447bfee969fbf50dcc56a47683a83aeccf82ceeb630a98767c441de8f03da67240dec74346791018c29bd28eff5b6e270f98b99f27392131aae44cc9919ec8867a4b249ba55707c74f7d1d49f3b86c9952a91d7209ec61725ade69695d18d1c5593087c420c69e949a887ae0dfe84e52f4a94e4dfdf303480f363e4f87c47ffb44d652a1dcbdccd74ef225192462961cd98ffa836830ea4ff5da093258bcaad89195107e21cdc30bfced02002f81bd18f0e71532e31bf5bdbd1b88b43b02f8beb8eb9c828159fc4bf8fdd08a5225da940bf73723ad0eacc5e8e906c1d3ebbd1363fe9b19951d3fb52926e0780c33b13f4bc45363d8191f106d8bc83de1a1a1923530929ae1bc094a923e8aa7a77b21358d3cab6c4a0123e64891512efb2a25e6e67ef4cc7c5367f57bdbce14fecd695734929a34dc574f991fd2305e412f0a6285f4ff4ba12d6984b0966e1c3e9b0223d99817ea9d1fc00c32ddc871b9801bed4bd8cdf63c6282d37af1d9ebe02bf25d30ab32be5f5c8b816e231fcaf208edd62cfbeac030eae2d47dd6c3ccda7e5838bb79aaed8348339a7265d9f9632fd30a9fa66f24793ff88ca45a9d15ef42d0eada4139f6710b00efa6fede16b2c518aa5ac11f1d40c40684e9eaa24587fae509c8f708e19a25eb4b5f9e9ca69f4511d6e8b2ef1aa7025ed6503bd670e098a049af5bf8692a45afc0c4db8cbfa5d6c796651e2666fd6687550564accd53b37b0ef219554b37a22c7e0817ec8213e7ec5c9f50eefd996e62c6e222ed60655b2b2d020aba1c11d778115bfb8faf261664e3ae1618621eb2d3f99d705bd90c2155a3c3428141646d52dfc9b8073a500ae4479ed78181e5932d8d62d6544c1af46dea7019c33101d4d8ff1897d9ca29869e323bf8ee78386f744e1d40b11f26612ffd6ee59b12fa511c8db8c9a0546ba204d284e01450448b10831890aecdb2d0c925b3bc197811dbb1536a0ec3fb2ec007291b62055abd0f9f9b7720dfbeff00170c54a90f1c10430d16bb28392a0907f629df1a99e59f66fc3a3e85b8c1083561ea66e236574b925153b05a6e2e2d8a7132dec0d91936ee50acaec7dcbc4163eeb77d7b500981f22345718e18e7cf4b7133f98e9cd6a434ee257bd9a13ea7ed7cf754d7739c0c45334bafe9e3c14b226f8e2b9d234f3a518ca2373c739be2d855b0a80179f17b3dc2408565ad3d7aadb48bd355dc62fe6eb7e51d5360afb5714071834944cb830979761eb4054f773fda536964e63f8469ca54dae6acd89893ddd2c5d52ccacf870994214d9ef34e30c4b5f16e303d3f63d6cc2326e5def06ec5de6b9bcab26f05984361e001684ecdbd15fd80b355da94af2b4444faa327201e38d44d2064b649910dbe96ebd2c6edd643083e6a3f07f3188aed7ff414a8613fb2a28a071d2ed3006f9f187e1bf1dc3f0191d507af97431ef6ae4e705d71fe754b7317b74a2537ddf7aa8ddd8e81590e49799d9891ce87770d3013d3a0e2b555392b027036fb90804ec3187f4084b9c464aa43f11a9e6a1c83868659c359ec6b1ee923064d95ea12507ec4fb1971aa6ebacece6876570393c7a4313201f0f5bca6a529a014052aecc0fc09d67496a1cee0c17147dd39e5d05b980c146baba26cdd5d2381f816fd7a254f6995d3eefc778be9dd384b7da280a6047c26ab15a4d488f772af95aa92429f852a6036e9d4b563b5ec1db0459d92fa1ab52d1b5cbbb72e2ec1b1b52ab393c7c31e0e242ac5535a30c3c558d42b97ae4e70b51234f6ea4529a35064912380d0548dd460b6ad34c392b7da4ca93f5618ff4de530ebba02f3beab4e188b49968904714a9e1e792791ad7972745ac4d254178a4bdd8e996663f289baa9d5db9e32356a3ddca7d8df3454c5e80f9df8cabed37bd98876e5a42b47e09b3cacf0beccdef5b5874ecb1e4adfc33c3d3ce696c1175a813d7d6061ec351fd8e9697a480455bd19024d6129b53441ff4548f34f67999d487d62129922b7350e53236d3180457bcd5f8e1a30977a8173bc4aa39fb261c30578ab43ad1f8d62ceb38940e2060cb2b9a158c930a8ddd4d5ad03617760f3e6da16a8294638adf9b8a0b9be13b1af1f04a45a370f21931501361ef4076dae70f6a6b7079818305c8e95dfddbfb8fced630443f8abdbb359e090c767f0a4f73a6cc4ce7b8b9f5f5c694a524182b7f900b533fea9cf0073710129ad3a75dbcdff1571bf3db1fcdecdde28bdebd291eb035c12ca65dd6fa15cc8c19ced668bb22a7ee53ee68b82bf5ce216e29e6769d75297ca64b5e636004e903280cbe76c1b4e522685c4169262960e617419dd414ff5e802968ba9db89ceb1a671e0877917295dfcb8a29b55b8a477fbd5c841127f18decc3726774366a84fadbe3ff1b7069f3f274cf9391aba81cf08a75cf31d775ddd77221afe7bedf5d926b61c0887373fb3aa961470d5d17ee8dad7f0217469c95a70b8770908aaf4d6f286891aabbec38baf47c7146c44150e1733991a57d74443e5a32f9382f668a70b386084c435239878a91880a24e63ef8a220a0676ce5870559984df418c7c0cafe7e53c9c6c271c11efb6d8fec125262bdd400238f9dc233f371297e1bfa426b25455992101a1159008b5aa0612f2c15ae51dbeba19868a359372a91d3999a88b5639b766b7bc83838567a9a4e14f671b7b1754ecde65ec719fad55c30cd40a6826476ef5cb9ad3779cfdee9c64437786810f12bde4540505d597d7ef1ba0b414f3a087158e59a054b1db51bf2401e5fc9e7c0ccfadbc268ef26a4418ddf7be0bee3d1d0b78f89a5ad78406349ac5df42a1ff205d445141010cc0caa516d1c331ce2757bb12b147bc835199c03db848f95fb70a5f278b2319ca785e8feeb7d158bbd34c7c1bdcbcef29504e21e4c51b304c1b669077efc4f142d9c15e762410f3ec9a6afa5ca86e197fe0bc8d3a441dc66dfa97ebbc71cc7749fed76b14c35b4420e4aeb0a9f083db47cf2bc83e4d3a0590140e960e64a65988b3905e5ff38388c1d5c1b5f4854b59b11f120879a2e4fbcdd8f0b0676cf0812c54671d16e3791455f1f222ebf3d7acae51a93491eafdc853f9d859f827ad9edc796c90f92d041374e79bc5e7623a44eb6019964bfdb697b35b095e672623050a9811520eb43466c785e9271dffe3ac5308fda6aeec593325cc7f6c0160fb31e681608f024c6c512229783787a24df9a3a71682498ecd99f9103ad7d3f07e7ee3fb9500698d660638516f11fe66b26f1303921910bdc079b4aff0c3daf854df0927cc3c17beebd24c54a29ecf2a995b06b2ae93dd5ffee8e30e0ed3c3b619269088e866811136a35088a655af4721133e5d6b1b8022da8fde3b3c85f4edd5270bda512131e559726614d843b9a6dd4f710956dfc24f7ea593c84b900d65dbe5dd91609e858652cbe009755dd8837ee037045329423d0e5655572aecff0f330ebf463269d9b79d511eed1adafb0eb7b553877f7f83ba87e93132a2b44b7298cdb7957d522ff4890cd06ac1c11beba9a86cb33df3a275d0b07d1c71c88d0a71825aa9cc097ab954807a93c14a07d5d8972fd51ec4d279d2ee6035e65c8c8da722917a973122fea3c1398125c8307445305935bab9014f8a048344201ccd25f5a5da571b7010cfc9afb6d2ba69bc75522c640f5c6702f6018cd16db2e7f0112ca51cd057c564a090cd0f3bc920850a739d782a49261fca0b965a5ae8cde0d260eb8b9dec59d3527a96622ab75762b1dcfe7759fb36e74d16a58ecda44f337d981f283268cd03d3426a3ffdc2a8397c7e5ac59a1e9be3a24c", 0x1000}, {&(0x7f0000001400)="f532cea4fac7de0e7067ec9e822f3b0308d3dc82eb7adeea0f70b714bd2d652c83293ea1674069e4e6df72074349bff3e8963a96cc49ecc99ef7f514f056e5c01b282d0c6cd6fdd4d054d61b8a25a1703f5dbc64b61fd304dd5ef47781a87953edba72b573b4109c6617f2d78d47d6fcfacebfc6d19382aa", 0x78}, {&(0x7f0000000180)="d995561c43df8def537a4fc96b87c86e35b552896d6c3d1cb0d248aed7fdc95c6a02ee7b363fbccab7a638adc49e5e", 0x2f}, {&(0x7f0000001480)="24b549a5398a3d0acf4d3253a154323a8add4a129d11048956980e2ab2b385d143e7ca6be634934174ee1eb6fd1793cb2f4552ed914fb691e626449612f5d21f63f9316c737acc", 0x47}, {&(0x7f0000001500)="d7c5452c02bb26794ed1865e53a30fe3ae00a0ac1a459d486dcda479efb73925492af089c72d606a7789fdc0b2a9f655300c4056108724413e703dcf1cf1d84abfc3a82ef0acd6110b83f6fc167ca9db4c68247d47dfd1605b1df3acaceca4da50fd1391e471e07dcb5d3e6cef737566066db71691c99f95942de9c82a6ac73c8f1bead27ac1bf7a78b0464058948829fffd41d8b9e665c0de04fa7898fce703065e2a3e3ee5326efb35fa488d332cf17ae17882b0ea7d823d804792a24ed60ecb8971d8865da8599ca631c6315f9c4ae564", 0xd2}], 0x7, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r2, 0x1}, @request_death={0x400c630e, 0x3, 0x1}], 0x37, 0x0, &(0x7f0000000100)="045a946911fa20546121cf80d1c6e13889357dbf9ff0fcb0eabeaa1a051e30386865398a3037d919bd38d3f979783524e6959f75b700c1"}) [ 280.888061] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.895633] binder_alloc: 15704: binder_alloc_buf, no vma [ 280.911150] binder: BINDER_SET_CONTEXT_MGR already set [ 280.912051] binder: release 15675:15682 transaction 803 out, still active [ 280.924026] binder: 15709:15712 ioctl 40046207 0 returned -16 [ 280.924284] binder: 15704:15710 transaction failed 29189/-3, size 0-0 line 3254 15:34:02 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x40000000000000, 0x8703, 0x6, 0x7}) 15:34:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 280.961866] binder_alloc: binder_alloc_mmap_handler: 15704 20001000-20004000 already mapped failed -16 [ 280.972071] binder: BINDER_SET_CONTEXT_MGR already set [ 280.984465] binder: unexpected work type, 4, not freed [ 280.998124] binder: BINDER_SET_CONTEXT_MGR already set [ 281.003368] binder: 15719:15722 BC_FREE_BUFFER u0000000000000000 no match [ 281.006305] binder: 15709:15720 ioctl 40046207 0 returned -16 [ 281.017041] binder: 15704:15721 ioctl 40046207 0 returned -16 [ 281.024889] binder: undelivered TRANSACTION_COMPLETE [ 281.030850] binder_alloc: 15704: binder_alloc_buf, no vma [ 281.036871] binder: 15709:15712 transaction failed 29189/-3, size 0-0 line 3254 [ 281.040801] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.048677] binder_alloc: 15704: binder_alloc_buf, no vma [ 281.048761] binder_alloc: 15704: binder_alloc_buf, no vma 15:34:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:34:03 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) [ 281.063522] binder: 15704:15726 transaction failed 29189/-3, size 24-8 line 3254 [ 281.066483] binder: 15719:15731 BC_INCREFS_DONE u0000000000000000 no match [ 281.087766] binder: send failed reply for transaction 803, target dead 15:34:03 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) [ 281.113659] binder: 15704:15727 transaction failed 29189/-3, size 0-0 line 3254 [ 281.129689] binder: 15719:15731 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 15:34:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@empty]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x24000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100), 0x4) [ 281.161460] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.176021] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.186006] binder: 15737:15741 BC_FREE_BUFFER u0000000000000000 no match [ 281.201378] binder: 15719:15731 BC_FREE_BUFFER u0000000000000000 no match 15:34:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r7 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000640)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000d40), &(0x7f0000000e00)=0x0, &(0x7f0000000d80)) getresgid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) fstat(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) getgroups(0x9, &(0x7f0000000b40)=[0xee00, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee00]) r16 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000010005000000000002000600", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="02000223", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="040007000000000008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r14, @ANYBLOB="08000200", @ANYRES32=r15, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r16, @ANYBLOB="1000040000000004205e070000000000"], 0x9c, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340406198c6819f01000000000000007d00bc1a0000000000000000000000794b40a59eb13001c9ddd3852c04f6000000000000000000000000000000000000000000000000000000000000a8c5e2ca1cccf7860000000000"], 0x0, 0x0, 0x0}) 15:34:03 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000180)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='\x00\x00\x00\x0f(\x97]\xe0:\r +\xa4\x1aG\n\x19\xf5\x00\x00\xd5\x88\x83U\xa8%\xec\x00\x00\x00\x00\xd1\xd1r9\x10g\xb7\xe9RI\xde\xfbCW6]\xb0\x9dq\xa1\xa0b\xc7eU\xa4@W\xe0\xa62\xa3\x122\xa1\x15\xd2\x18\x8dj\xea\v\x82\x9b\xa0\x11\xc2\xc4G\xe8\xac\xa1\xfe\xd3\xa6k\xa19x-\xe5\xcd\xb9\xc3!\xa3~+\x16C\xad\xeb\xe4\xc9\x9a\xb7?\xa2\xef\r\xb0EG\xc64\xa0?\xf1\xba\xd7;/v\x94\xfa\aKG\xf8\x92\xe1&Y1\x1f\xf7\xf6\xc9!\b\xbe\xbd\xbd\xb7x\xf1\xc2@\xb6\xf1\xbc\xe7\xb3V\x14\xa4X\xc4') [ 281.214590] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.234624] binder: 15719:15722 BC_INCREFS_DONE u0000000000000000 no match [ 281.243099] binder: 15719:15722 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 281.251079] binder: send failed reply for transaction 810 to 15704:15710 15:34:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:34:03 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:03 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)) [ 281.259342] binder: 15744:15748 got transaction to context manager from process owning it [ 281.261181] binder: BINDER_SET_CONTEXT_MGR already set [ 281.275678] binder: send failed reply for transaction 814 to 15709:15720 [ 281.285209] binder: 15744:15748 transaction failed 29201/-22, size 0-0 line 3108 [ 281.324678] binder: 15744:15753 ioctl 400454d1 20000000 returned -22 [ 281.332054] binder: 15747:15755 got transaction to invalid handle [ 281.355225] binder: 15747:15750 ioctl 40046207 0 returned -16 [ 281.355235] binder: undelivered TRANSACTION_COMPLETE [ 281.366683] binder: undelivered TRANSACTION_ERROR: 29189 15:34:03 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x40) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r2 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="a5a66e3f511266b276a23720fe8f4376", 0x10) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000240)) r3 = syz_open_procfs$namespace(r2, &(0x7f0000005400)='ns/net\x00') socket$inet6(0xa, 0x6, 0x5) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@rand_addr="f8a8835f1582c8aa535b5b69b23c3af8", @local, @dev={0xfe, 0x80, [], 0x10}, 0x5, 0x5, 0x1, 0x400, 0x2, 0x80400012, r5}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4001, 0x0) dup3(r1, r3, 0x80000) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000180)=0xece2) fstat(r1, &(0x7f00000002c0)) ioctl$TCGETA(r6, 0x5405, &(0x7f00000001c0)) [ 281.370956] binder: 15758:15762 BC_FREE_BUFFER u0000000000000000 no match [ 281.380284] binder: 15747:15755 transaction failed 29201/-22, size -8803448991201054306-16122924 line 3117 [ 281.398394] binder: 15760:15763 BC_FREE_BUFFER u0000000000000000 no match [ 281.398943] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.407904] binder: BINDER_SET_CONTEXT_MGR already set 15:34:03 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) [ 281.428150] binder_alloc: binder_alloc_mmap_handler: 15747 20001000-20004000 already mapped failed -16 [ 281.443614] binder: 15744:15769 ioctl 400454d1 20000000 returned -22 [ 281.450220] binder: 15760:15770 BC_FREE_BUFFER u0000000000000000 no match [ 281.465386] binder_alloc: 15744: binder_alloc_buf, no vma 15:34:03 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8200, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0xfffffffffffffffc, 0x9, 0xffffffffffff44f2}, 0xc) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03630840a672f46f299d2ae6bcd0cb61426f5791d1f01c392cd4206ab7b0a0f7303aae76dada43d612a3fd43045d8f8a22cfecae9db121505067f38e6cb615f1", @ANYRES64=0x0], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x1c9c380}, {r2, r3+10000000}}, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) [ 281.471594] binder: 15744:15748 transaction failed 29189/-3, size 0-0 line 3254 [ 281.471992] binder: undelivered TRANSACTION_COMPLETE [ 281.480368] binder: 15744:15753 ioctl 40046207 0 returned -16 [ 281.485452] binder: BINDER_SET_CONTEXT_MGR already set [ 281.515350] binder: 15747:15755 got transaction to invalid handle [ 281.521892] binder: 15747:15750 ioctl 40046207 0 returned -16 15:34:03 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) [ 281.539659] binder: 15747:15755 transaction failed 29201/-22, size -8803448991201054306-16122924 line 3117 [ 281.550362] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.578530] binder: undelivered TRANSACTION_ERROR: 29189 15:34:03 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) wait4(r1, &(0x7f0000000140), 0x8, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x1, 0x0, 0x3}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0063404000000000125efd0d36a0c6d600000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 15:34:03 executing program 3: geteuid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000100)="1cc6010c795bd477259ee1545d56545cdbf6b18b8b4a1f0981b63f68ea0965c568230ac2c9ba6dc6b988b624a7f44c175c52c6c63afed23d93d570da2b0f692f6162be3a219106bfb70f4ab051d915b2d70c123eedbc244620774a363f2ab3404fe3976a59e9059956054d4475b5022c19e14a37f4d4683f79b956caacbdd00ace3938607166672fcd1ff0b194fd921eb86728328ea3a54dc34190b4040434d89a820020b8a8afae5bc6bc5915d2f071954116903c3fb9f8eaa1286b99d7d45b0bf6dc266cc68a131f8ae10643c567d84e48cd1e2d91d4b5e3b4db326f0c362d9bbcc8968055b8b7eaa4aac42698a52985420a22fa", 0xf5) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d25e462dcec3e2dc88e295d7a81259a53b1c00d4c5e135fcdc111846bccfaca43c0bebf2f1a1ea3e2198c96e5e9bd125ec5eddf6f4ecfbe65d40f3035bb590ffc559a11ef9bf0b993b3a2186120b7bf14bc6b35f9822d7a6d523eb6e26eb7ded77cbf57fb3a19cda254dfec707a8d2604797"], 0x0, 0x0, 0x0}) [ 281.598106] binder: 15783:15787 BC_FREE_BUFFER ue62a9d296ff472a6 no match [ 281.604303] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.637993] binder: undelivered TRANSACTION_ERROR: 29201 15:34:03 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) 15:34:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8df115c381b2620feadd0ca18152c8f6f255c810cc26db073206e56ef9bbd45a3445c86386a3ad58f15ffead0730cfd9d5ef045964d170f7f3fc05575f7274e37b4966cd33a4546a66f897c5e2465cc99350354e10b7ea9002958ca6fd4e131a3661b78f13c2f54503e9de72e7f3", 0x6e}, {&(0x7f0000000200)="32cfcfbeb842bc8661aedb90ba94e15e07511b153b76e5a29a8f76c027c2cbf15c2047ad1573e0805b1a28882a64df87a63bfb986b63176f42b84ec9618d0fbb910e34a2e278b41ea33f83d765e6635cc6add0af465e59087093060ef1d0f7b9ca3797d53ba65a1210168a54ef449994660c67501316f907dc4fe09914dd3b41b1df737e246d835fec6a4ebf816cb5cd3453f8006c3c568d887c08b5926fcb9d7e9eecd58c36590b0159b67ccebbec743a3599702743cfb3def389494ab9e7ec19b7a9e15100ebc4e1d273130e9d87ef66b8a4eff8ff59c01d67cd93ee8d5fb5f50b2547ab559aaabe8d", 0xea}, {&(0x7f0000000300)="439da14d379a0fefbce5099b9273aa04ad3d597447eafe0ef7ef8e911d0b6461d541559b1c4d52fc39894e28b084e95c4406bae465f974b1e1a8abd4f92bc1a58c396be9509452b028b5f2d790fdb3dbf290e1c5309084a0529c23987bd41ad2f055dc9bd59136a29e22bbc18535795a117f6d53269ea05b5fbadeaee38875388ffadd759a03f817aafdebe40032c481c365044c17ad5f804ec570e1b693b7acb8db7e460e6efea0f35931fc9d8c9e10e860433aea69eae5fadf11f5c49613681f37470eda8ac0a940f3cb86729af976b607b33f42dbe2c5b430675a52be3c9401a3", 0xe2}], 0x3) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f0000000140)=[@enter_looper, @increfs_done={0x40106308, r1, 0x4}, @release={0x40046306, 0x2}], 0xf6, 0x0, &(0x7f0000000400)="eeecee098c2f7e5ee18321d8cd8dab67e94f8c3e253b333baa305af5801ec2f32c86547f0ff65e3fbf5020b2989ec91b47a1439adc721d6e1f89a037614c3d412a4b7f7e8d4cc6f528f2985544527ae65586010b62c8e3a5db87ac6b9349795f2583699c16ef0e3b6f87be6e3bd9174101546d25a3af38038156febd48186cf82b59060c885c28604b0c4047b018c297bd0728307ff545bc736c8d7bb151765412fc718075f284734526f10a9aaf483f0250a4fbd387e360d8017fa6afc666045203e210c68a3e104b6dbfa692eff9bfbb0cb73becd219d043547873ac88fbea5027166a0aa5403e53f6a6bb2554ad5f44f460f93fcd"}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) 15:34:03 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 281.649982] binder: 15783:15795 BC_FREE_BUFFER ue62a9d296ff472a6 no match [ 281.656132] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.665767] binder: 15789:15794 got transaction to context manager from process owning it [ 281.666623] binder: BINDER_SET_CONTEXT_MGR already set [ 281.680813] binder: 15789:15794 transaction failed 29201/-22, size 0-131072 line 3108 15:34:03 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 281.744682] binder_alloc: 15789: binder_alloc_buf, no vma [ 281.751268] binder: 15793:15797 ioctl 40046207 0 returned -16 [ 281.755275] binder: BINDER_SET_CONTEXT_MGR already set [ 281.757491] binder: 15793:15801 transaction failed 29189/-3, size 24-8 line 3254 [ 281.777035] binder: 15806:15810 BC_INCREFS_DONE u0000000000000000 no match [ 281.777329] binder: 15793:15809 got transaction to invalid handle 15:34:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:03 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 281.795651] binder: 15806:15810 Release 1 refcount change on invalid ref 2 ret -22 [ 281.810140] binder: 15789:15808 ioctl 40046207 0 returned -16 [ 281.814711] binder_alloc: 15789: binder_alloc_buf, no vma [ 281.825178] binder: undelivered TRANSACTION_ERROR: 29201 15:34:03 executing program 3: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') [ 281.838423] binder: 15789:15794 transaction failed 29189/-3, size 0-131072 line 3254 [ 281.845301] binder: 15793:15809 transaction failed 29201/-22, size 0-0 line 3117 [ 281.880608] binder: undelivered TRANSACTION_ERROR: 29189 15:34:03 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 281.893282] binder_alloc: binder_alloc_mmap_handler: 15793 20001000-20004000 already mapped failed -16 15:34:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x4, r1}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340000000000000000000000000000000000000000000000000000000000000000005050000000000000000000000000000000000af67fa81fc95c6300000"], 0x0, 0x0, 0x0}) 15:34:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x2}) fgetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '/dev/binder#\x00'}, &(0x7f0000000200)=""/4096, 0x11d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 281.939125] binder: 15793:15809 transaction failed 29189/-22, size 24-8 line 3117 [ 281.967318] binder: 15793:15797 got transaction to invalid handle [ 281.975167] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.980997] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.991800] binder: 15793:15797 transaction failed 29201/-22, size 0-0 line 3117 [ 281.998077] binder: BINDER_SET_CONTEXT_MGR already set [ 282.012660] binder: 15833:15836 BC_FREE_BUFFER u0000000000000000 no match [ 282.025881] binder: 15832:15834 ioctl 40046207 0 returned -16 [ 282.025892] binder: undelivered TRANSACTION_ERROR: 29189 15:34:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000100)={{0x2, 0x4e23, @broadcast}, {0x6, @random="632b902c2269"}, 0x24, {0x2, 0x4e24, @remote}, 'sit0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') pselect6(0x40, &(0x7f0000000000)={0x2, 0x8000, 0x74, 0x8000, 0x1000000, 0x4, 0x3, 0x1}, &(0x7f0000000040)={0xffffffffffffffc0, 0xffffffffffffff6b, 0x8, 0x100000000, 0x6, 0x55c0000000, 0x665, 0x6}, &(0x7f0000000080)={0x4, 0x1, 0x6, 0x1f, 0x8001, 0x400, 0x8, 0x1}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={0x100}, 0x8}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:04 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 282.047969] binder: 15832:15838 unknown command 4219648 [ 282.065923] binder: 15832:15838 ioctl c0306201 200000c0 returned -22 [ 282.069879] binder: 15833:15841 BC_FREE_BUFFER u0000000000000000 no match [ 282.081748] binder: undelivered TRANSACTION_ERROR: 29201 15:34:04 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) fadvise64(r1, 0x0, 0x9, 0x7) [ 282.107941] binder: 15832:15834 unknown command 4219648 [ 282.116637] binder: 15832:15834 ioctl c0306201 200000c0 returned -22 [ 282.119598] binder_alloc: 15843: binder_alloc_buf, no vma 15:34:04 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) r1 = getuid() mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x20, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x48e}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x8001}}], [{@hash='hash'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'em0('}}, {@uid_lt={'uid<', r1}}, {@dont_appraise='dont_appraise'}, {@measure='measure'}]}) getuid() 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:04 executing program 5: r0 = socket(0x8, 0x1, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x5, 0x4, 0x2000}, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xb0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040030000000000000000000000000000000000000001000000000000000000000000000000000000001000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0b63000000634040000000000000000000000000000000000000000001000000000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="f78880b69cffffffffffffff"], @ANYBLOB="0763044001000000066304400300000008631040", @ANYRES64=r3, @ANYBLOB="0100000000000000"], 0xc5, 0x0, &(0x7f0000000280)="2697d6d4c56f250e2ebed4134819645c9f67a1ee89fe2611d78dcd3ef2d0c101cc0024046981a5aa5a3cb1421c9356e26d8f4e2f24aab5f9db791cd64809bf7ab01a35cd4f5f124ac3961524d195e1da75969af69d4f385d58d6dbf70eca5235c522d63cd0e2bd03f1be5042b18f9762abdfd080caef6aa5383b43f8709f889a8001c429151742c66dbb39c6507bde73220ef937f646dead9c3b8e50a2734cecf955e471fcb7759d1f6f0babab7d446bde7ca1acac6e9835dc2a73f2a045128b43889a6045"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 282.158099] binder: 15843:15847 transaction failed 29189/-3, size 0-0 line 3254 15:34:04 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 282.221027] binder: 15853:15862 BC_FREE_BUFFER u0000000000000000 no match [ 282.223762] binder_alloc: binder_alloc_mmap_handler: 15843 20001000-20004000 already mapped failed -16 [ 282.260730] binder: BINDER_SET_CONTEXT_MGR already set 15:34:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 282.261426] binder: 15853:15869 BC_FREE_BUFFER u0000000000000000 no match [ 282.266840] binder: 15843:15847 ioctl 40046207 0 returned -16 [ 282.280432] binder_alloc: 15843: binder_alloc_buf, no vma [ 282.298817] binder: 15861:15866 got transaction to invalid handle [ 282.305675] binder: 15843:15872 transaction failed 29189/-3, size 24-8 line 3254 [ 282.312408] binder: 15861:15866 transaction failed 29201/-22, size 0-16 line 3117 [ 282.326778] binder: 15843:15863 got transaction to invalid handle [ 282.333994] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.339863] binder: send failed reply for transaction 833 to 15843:15847 [ 282.341036] binder: 15843:15863 transaction failed 29201/-22, size 0-0 line 3117 [ 282.347411] binder_alloc: 15861: binder_alloc_buf, no vma 15:34:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x10000, {0x8001, 0x5, 0x1, 0x7, 0x4, 0x5}}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x3a, @broadcast, 0x4e24, 0x4, 'ovf\x00', 0x20, 0x4681, 0x4}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:04 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x11, 0x1, 0xffff}], 0x18) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x101000, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/validatetrans\x00', 0x1, 0x0) 15:34:04 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 282.376262] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.382098] binder: 15861:15873 transaction failed 29189/-3, size 0-0 line 3254 [ 282.389823] binder: undelivered TRANSACTION_ERROR: 29201 [ 282.403237] binder: undelivered TRANSACTION_COMPLETE [ 282.416013] binder: 15861:15866 got transaction to invalid handle 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:04 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 282.417443] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.422839] binder: BINDER_SET_CONTEXT_MGR already set [ 282.436287] binder: 15861:15866 transaction failed 29201/-22, size 0-16 line 3117 [ 282.453622] binder: 15885:15890 BC_FREE_BUFFER u0000000000000000 no match [ 282.468380] binder_alloc: 15886: binder_alloc_buf, no vma 15:34:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') getpgid(0xffffffffffffffff) r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net@') [ 282.469066] binder_alloc: 15861: binder_alloc_buf, no vma [ 282.474448] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.480921] binder: 15861:15873 ioctl 40046207 0 returned -16 [ 282.500823] binder: 15861:15889 transaction failed 29189/-3, size 0-0 line 3254 [ 282.510209] binder: 15886:15897 transaction failed 29189/-3, size 0-0 line 3254 [ 282.517234] binder: undelivered TRANSACTION_ERROR: 29189 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:04 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r2 = getpid() ptrace$getregs(0xffffffffffffffff, r2, 0x8, &(0x7f0000000440)=""/222) r3 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r4, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$search(0xa, r1, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) sendto$inet(r6, &(0x7f0000000540)="c72ef62794a052a64b7ca5ad0eab52d2290d64141342b192b6aa61d5d71400a5c7379b54ff2fad90bd18012c1ccc97c73863cb5fd082113a4c5d7a00adc4527da78f23b11bbee165575df88aaaf1025b862928c0c636da0de3867c034b5d9c8fce34691287f5512e", 0x68, 0x40000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x4a1a}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="006340400000000000000000000000000050e4000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000fe8865c93309b37bfd453d99fb18da56411ff24e264d07c79feb3812ef226971c3a1811c56"], 0xfffffe7d, 0x0, 0x0}) 15:34:04 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) write(r0, &(0x7f0000000040)="181fc99b3d4e0e678c4aa17204c35a6c6be74366020104ca6f8e4ab9575ca81b65bed0c8260dbc568a9290379f4aa559e23c4158832a307f81633f75e21310bb621d6c54a8d428f068236c6ed4020be26693cf42bef3ff076aedfd7b2ff80bea827fc785c2941959250f5d0e28cbf20d5061a2dfaf74cae7cffbe982d0ec91cf36e28cdc2e3440b8f66c60c3136dfbe358f5822afef4f9516708ffa82d02ca2d4ca476409337c56c7928f51dbf7243a99abd78e65ac04bee89e07992995afef2649241", 0xc3) sendfile(r0, r0, &(0x7f0000000140), 0xba3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x142) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000280)=r2) r3 = socket$inet(0x2, 0x800, 0x10000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000001c0)) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="ac3c1414bbac141419000000000a000000000003d8000000"], 0x18) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3) [ 282.518708] binder: 15885:15900 BC_FREE_BUFFER u0000000000000000 no match 15:34:04 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:04 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x2c1, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r2 = dup2(r0, r1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000040)=[@exit_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x3}], 0xb, 0x0, &(0x7f00000000c0)="4e8c7039b9f60da7ec1ec9"}) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0x200) [ 282.586664] binder_alloc: binder_alloc_mmap_handler: 15886 20002000-20006000 already mapped failed -16 [ 282.589328] binder: BINDER_SET_CONTEXT_MGR already set [ 282.613204] binder: 15908:15915 ioctl 40046207 0 returned -16 [ 282.619580] binder: BINDER_SET_CONTEXT_MGR already set [ 282.636261] binder: 15886:15913 ioctl 40046207 0 returned -16 [ 282.645615] binder_alloc: 15886: binder_alloc_buf, no vma [ 282.658653] binder: 15886:15913 got transaction to invalid handle [ 282.666261] binder_alloc: 15886: binder_alloc_buf, no vma [ 282.672131] binder: 15886:15897 transaction failed 29189/-3, size 24-8 line 3254 [ 282.682499] binder: 15922:15926 unknown command 0 [ 282.687501] binder: 15908:15923 transaction failed 29189/-3, size 16777216-0 line 3254 [ 282.691707] binder: 15922:15926 ioctl c0306201 20000000 returned -22 [ 282.698850] binder: 15886:15913 transaction failed 29201/-22, size 0-0 line 3117 [ 282.709827] binder: 15922:15926 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 282.714322] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.720399] binder: 15922:15926 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 282.724398] binder: 15908:15923 ioctl c0306201 200000c0 returned -14 [ 282.738220] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.742163] binder: 15922:15926 Acquire 1 refcount change on invalid ref 3 ret -22 [ 282.751225] binder_alloc: 15908: binder_alloc_buf, no vma [ 282.753870] binder: 15922:15926 ioctl 127b 200001c0 returned -22 [ 282.757363] binder: 15908:15915 transaction failed 29189/-3, size 16777216-0 line 3254 [ 282.757390] binder: 15908:15915 ioctl c0306201 200000c0 returned -14 [ 282.765834] binder: 15922:15926 ioctl 40086607 20000140 returned -22 15:34:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000006, 0x40010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffdf1, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000006c0)={@loopback, @broadcast, r3}, 0xc) 15:34:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x13, &(0x7f0000000100)='!mime_typevboxnet0\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(r2, &(0x7f0000005400)='Ns/net\x00') syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/user\x00') getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000080)={@broadcast}, &(0x7f00000000c0)=0x8) 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:04 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 282.772176] binder: send failed reply for transaction 845 to 15886:15897 [ 282.783080] binder: 15922:15929 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 282.789288] binder: undelivered TRANSACTION_ERROR: 29201 [ 282.822322] binder: undelivered TRANSACTION_COMPLETE [ 282.822619] binder: 15922:15929 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 15:34:04 executing program 3: r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x21, @remote, 0x4e23, 0x1, 'none\x00', 0x1, 0x4, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 0x9, 0x2, 0xffffffffffffffe1}}, 0x44) [ 282.832270] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.840997] binder: 15922:15926 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 282.847916] binder: BINDER_SET_CONTEXT_MGR already set [ 282.848925] binder: 15922:15939 ioctl 127b 200001c0 returned -22 [ 282.854301] binder: 15934:15941 ioctl 40046207 0 returned -16 [ 282.862054] binder: 15922:15926 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 282.866939] binder: 15922:15929 Acquire 1 refcount change on invalid ref 3 ret -22 15:34:04 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 282.887422] binder: 15934:15941 got transaction to invalid handle [ 282.888015] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.897653] binder: 15934:15941 transaction failed 29201/-22, size 0-0 line 3117 [ 282.906655] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.926294] binder: 15922:15929 unknown command 0 15:34:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x40) 15:34:04 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 282.934813] binder: 15922:15926 Acquire 1 refcount change on invalid ref 3 ret -22 [ 282.947937] binder: 15922:15929 ioctl c0306201 20000000 returned -22 [ 282.956062] binder: 15947:15951 got transaction to context manager from process owning it [ 282.973201] binder: 15934:15949 got transaction to invalid handle 15:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:04 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') ioctl$int_in(r1, 0x5473, &(0x7f00000000c0)=0x7fffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)) 15:34:04 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0dc06fe91fa4ff33db7d653dd701630840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 282.983538] binder: 15934:15949 transaction failed 29201/-22, size 0-0 line 3117 [ 282.992784] binder: 15947:15951 transaction failed 29201/-22, size 0-0 line 3108 [ 283.015443] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.021602] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.027137] binder: 15953:15959 ioctl c0306201 0 returned -14 15:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind(r2, &(0x7f0000000180)=@l2={0x1f, 0x40, {0x9, 0x71d4, 0x8, 0xf36, 0x0, 0x100000001}, 0x8, 0x1000}, 0x80) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x364, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x4}, @exit_looper], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:34:05 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', 0x200, 0x100) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000002640)) fchmod(r0, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000002500)='user\x00', &(0x7f0000002540)={'syz', 0x3}, &(0x7f0000002580)='ns/net\x00', 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r2, &(0x7f0000002440)=[{&(0x7f00000000c0)="93eaec7107987d300e1df431abc7979ba9a912efb8b629b3c11a4ebaaf4a78c52699a938485e82d29e80cf877ec97f3603df47c75bcaf37918316820b220780fa0dd014dd879e0f7fc70dacd29891495ecbd5bad270467b3a8bc3589508d80d2135184259afb3def3dcc51c413f2c8e8bda257455f058ab1b1008f4f32d5897beae6550b7cae9394b7f1686a9cafb6e9e7db47ab8f779b92a3bf167f2a668a991abbe89dcb0341728f215d1b6c2c7c045a171baa209ab03ecd9e34391a419688892f93f84ecdedfc618b430188bfee6180ad73f41bb5cbca7e28646cb12f0c8a1ca2128e34ade1b320bfb6c8a80249b90d08857a7dad5b874226a050c34df32034552c0653eb0841751e3a2f1d8874f848cbaf5ed1e6d31c3cdc5d7a5320260c887259e183e0a9de6be1c962f3dd6ad71dffb9ba9f5eeee576f5ada71e3884e0bf5c9c686d9f65d3f7bbe14af326ff2fd8639946d58da2f5b6b120780eb645cbdd7b616cd4be984fa8aeb60a480dead55bf8fa34b8474606de3f9469bcd65195c7166721c35abb926ceaec57beb2454054aab8620c4c01f918dc6a5fa39db547ed830e4a009fee1263650ac629067c23b95b0b68910ea925ddd1c48fac666a2ef1d47eede212da882c6603a1510538fa08232f2afb8283c431ac46b6c1ac59a40e6377148ae05a9b9dc05ff9c52d0a7bbd34b9b8a4925708fa10f07659e5f1b7590bc9718b6c2c3aa746932bdb4e67539babd38392fd16e8cc1aa1cbbd7bfa80b90f452dc89e26d0ceb5a5805a6a18b17e6a365a171f0843c025cca4c2d082c9caad9d47452e699a088d8f8419716b269b09014713f35c934dcf5d849058dc9319c4d4a1de52bdb113aae3cb3fa651ee75f06a1923fd715969f6696554c0d3116f053143933a19e486aec712323c0d55740fdec3ecb7d3d4c3d50b9e7736c1e61d55f791dcec44fe6af2a994e9b732a1054930364f685396cf98ee5a53a9d88f753d80a564cefee6f22e96d781744f27d14919def36cc38c89bcb63677db8023e05e2fabd98e173bb59a17e3667796407f560e078c2572fe5ab3408a6050c72537a5d185bce504e629582c5da3d5ea4ccf74b6ea0b3caaf9d8dc7fae6c72d6f1832fa421517ff977730f1c2a8bacdc7a2d2c0460e39369a5f9332156af66f4355490f86a07f8d3280377ed74a70c8a8fd150281af5a0b6acc1a8de53d20c91a07bc70f54331b35d2b187ff7a0d0551245fc823a588b26ffa8d702536ec66b2d961ced1edfaccdbdd3b32585c43be97f11029c0d0a1812090d93455e54bb71cccb110774b63528bca8fa51fffc477669949b79ccc1e7fe2fbaf8a6bb84a2e830f1c66b504f4e7b7fb4585a236683e7f34876f7238edaad4dd26869852aed30a173e396bdd38aefe2f76751474e8bd1bd4ce99c13cf8db882f1720faba801bbf84c38ea10fa67b38d563657a6a90dd748080420d6394650be2b8ede8d8c40d04dc214d6198fce5c5d760dc7ed1b3a56cdf14b25aa0a4d4442b24bac6ded7e450ebdea5418f403d2e0665592de684bae2b1690d499dfd5e00cd39f4ed475a99c3e39b9bc1b48721db5df255d4b9a13a5f2d4c4e4ba151490402ed5353bcf507850b34a4f6eb44af833daf32f07fa0051831449828e80c020f9c0207d71b2dc588629eae7005ff0a1c281d68b96e56b7deb8d6b3588a3fc0e5d89aed2aaf58a00b7f5e1d587b1fdc30f5a69256ab5f9c1df8ff877fd802654121f1afeaf7f73c50ef39b9b30673078e5b8ced99cb8ebb287f261dfc57950c83c20482138baba9a3392ac62a9e283dd9f222c0b4e372b3bdc4cdf3c4f077f911076e52c0ce13696ce9be01e87231924cfd114ec5694d1435d5263b2b5404bf714e941612f5ac33c84c3e445e342ebb0ffac53b9e2d556d24d041edacceb4b33c89baa6e48e374bdf19573b92058301452a266551911c45e592585186ccf0321ab33a7203402c772be35df0709d214bc07711097dde68d282b2383904d97fad547c71d089a0e6953a6cc23d022fe0e02b1313ef7c7f28b8555ab2c7c865a6b5b6ded1fbbc8b7ae8575a80e5088ba674929760996737b4a9c56a4882c3e12d8fd6be65cbc9421112767fc6d1757aa4de427d544a0b2eb58f2d6118fa89548793976890e1d2e483ab88da909e6860a920d713682381d8031143ecf0c693491d0b38897d8d79ff12f5c3da2b83f8b8d82ff5578d1089280c939df4593139d61c06707284aaa1743c582b740f9118640303efe8c3a88bfbb3c70897e5ff80560fb6ea261ac0f61e4915f2e75fe2fc5249ed899fee3410746babcc5f5c659e266b8ee4fe180e3e169e212107e0b9e983b2b6097b90b843b7e598574096b89114726676e532d8e754c2b9bd605879c84517aeb3bad69eb70e5ac947a37a0bdaff8ee1ae64070137d618eb9cf0f6737b50878113a934a5b55dc6da16a4a9cc865ad4aa777febb3555d3f39b4fa0f3f6d0790b0cc85f1564b69472a43ba17efb9827cb47a45842b6639f33ef1cc0f88ff895fa4bbb4d14950299c61645e8de828a7208ff9710092d3d9780f91a20a4941b3264e00de1cd338d89b2fedc362ab5cfa1e1950e606780780655d82d7ad0c37acddab61fc601d75302f65d752910be9ae7086c5f46ad73436a55600325d109da994e8a90de7cfa368d206dac0db23d3734c5bf5f7f1af0224ded7948b6044d7d0b9b78bf64cde788c2ad4f747420b0eed4224049d91a2aeefeaaee49585f4ecbfd081603c20d0053dc2e78aff4d04487df953376e60ba2dee5a39e29edf0d115d01d40bd4ca5993531cfe7ef4417c406c82a2354d1c37e5e1d5f1be74951969a8a5952289896992be2fc1eced331418edb4e52c3e567bf732ff819606f71a1f9a62a7c78e3501ab8ef14898a493d8eea63e16838db08dd5cb11f3bce4439673cf1cb227590a67ca87833e79da24cd2a6e42fc0c66aae5164aea11afb494d72501d86196a43112a6bd0f92be9bd13761bf407413f2de3202f8dbb73f67f0fa6c93cf47992e18ebaf3748e943f0f9f059bbb4cc71269a60cfb55e95e10543d3dcaba241b282087bd80fb77bcceebc9a1bf4d6292a10a0ee52b5e4564906d95b7011f0320cc8451c9e61b7f345ca94054bfc76bba87bfc17ef4e53b5cee9e24957916a83f326a2702f989a27993f037d347cece6d224e3086f31753d055fad2afff3228b1dc5055feecb792d32542c262edb0e1c7a556170bd5578ed214467fc59309b689f03dd0d8952fb46251012d21aad7c100ccf906cd8c37a8d398e180e28752852bfb73266eb9ba6289865b1caf047799332120d60c509c13838891992d4bb1e0f82febdf64f5e742eccc7a34e59a1b553a61bd0974c99fb015ecd24d1c0c064fb29e43b2e5b9e5a3f16cd4f19a28c22c8b999c0ebc52846d98b4d3a3ba37f09b5aa8dfad3396be44b5843b0a0cefac5f328b9fa0ffb3d6c3a527afaf347f89f38268a2d151e811abba8da12c209e098b626779f7a5343b7b726a3da32afdfe420c8904ba080c1552d75aa0cb6bda3ec5f7be4d5a5940d702fb2fa84db4eed3478dc1f025c949a066c85476bbc1842172729ae68b34fd97a5ec2b74818e6ff5d6f599b2567ae803c02ed6f48af7a5383d3d6ffbd0afce38bdee4051d23301b8288e4d62923c0f4c2f8817b0b597aaa175d9fdbef1848c18d649c2d7f1b7296dd9b1cbb7b9f1ff4caad256c9d327f89a04b4dd879b5284ee00a34c4e1c2e9bb497de1db1c7c253ee294a5f2a61277ffd6e789da7211fa6d9216245a63c3e8be3f4a22c4018a724866c0b4af1a65a9e67c161c5573101e237d9400ed1ad5a1a75b5c985acba0cc0bcf2ad524b15cb3886db32a04bd300efa395a2399d47e55d82831e43e634eb29b2cfaa81f9433ee63ab564763f01a55de573633b97ee96160e59fe28360adb44c883c1d6f959fcf25175f887d0d541179f04f735ea2dbcd087424ef6fcb061506cdc02857bd94145cba06ea56b215b601350becd0b9a040e4d676f9796feca2960a251de88351a01c0254acc8df99553532c7582fa60a4c9d363523a53bdee4c2eebfb9c954aef781b257f17e2c39f598e2ecf28c69f7621bf13f4e2ae502072494051b4696fb7065cb564d7148f53f9fcb1c22be01ce889f51969ebb405daca0952a7bd524530b6252715c2f24c69433819f4ace42ef20c8f5fe14da4bc26f9252495ba33b737757fa027769f1183ac80c2ef8f9f5721c17839798663318ce683a502773b3770b78a1e2cba5292976f975b747e25a38b3f71956e4413629853a2aaf79e4594ce327530e58dc925beb2186dbb61863dd976f5d3deab6922cd62c34992a8521acbc66bf9b9b8ee91e4accbef363028a6c73f97d829636f633d70b2faab5f98676432c44515bcf1f04f912c5bd1fa1c4d13fd594df74ae2474335ba2b70fc3ecbe4c63c460e48b598bb85e20b07602e13aad54f00cf217e5daba319bcf5b3b3be34ae6eec83f0c34e1e69302790b396ac717f2eeb02c769408e902984d972d177c79a0fdf1718ed4881e39053258faf197eae8fe6f2dd8cf44bb5ee1a60be701c178c11442d68e8f73114f9d870d3c66252fc1d4dbde94e517561c5cb2219e0c6c72f2fe0d710a772d86617e5eaa8b369c354ac2c3a6cc2f9c72ddb929676247041e2f0d36ab5752544d02ce2a9c94bafaf33f83ec68247c5f67ba4c5cff6874166505238842a7e6a02710865833ff047785e597a4d9ffdd9bb976c76613f83678d01f50c4e587504c112e42636433e2e8d729cb27d5bb7dd350824fe22cb54093f657351c5c820335ed24ab1516b29fb9c7c188b3cfaf926e92851e49083496f697675bda63a52c9bdcef3c879f15db7bc8215de741aff8d778f1b820628e8b0be319479a780c0fe93d1bc9f17d3d386319b0d52097ad6cb84a0df9bffbaca8e8189d40efed5911c4dc9d4bd43375de63dc6a01636dbc919698a654b9cea438d68afa17214c268925b722387f71226d950cc4889dc8b26824ce1c8cfa34cfdf41fe88bc1ff3cb92c4cff37c03f8a95168cd132d2210f71ac1e7a04c2aced8073152ed41fb555a3cb62774e94456f4da902de99cbbef75c0b4096160aecbe6760fef26c76249032854942f2e0e496e30e96fea7535061cb0d6863cdebb47bd80c50f2b372403671768f5d75d05fb8f92d80354941fd2eeaed96222bdd59b375e5b1f865c2442b8cedc3b5078824c92a009f014eaf1105ad804a70c9af280268b1fa80d73b8b761b3f1e93daed8c12660cbe077f8bb499d804345e0d3d9b469fb85c7dd10baacf13924166bbd70c1dde6563d09a93306d234cbf6786ca70f6e58294acb32406fa19e77299a1f60f3396c4fc978ab4498e12e73274f6fd0ac889ee63609b6fa2b9d3a875dd44ee4f52666c92afdf7e9f7c20f4d23b19a88ebf96bca29e25604b0a06b2b1084275a6634fd36f226c9208f3a7192d384260ae363614d832cf60dc666a3461688c00b390183ac5ab2e96d2e799f9a324e58957191724f187d20218d5871fed955677b5001b874059217a04880c77e2341345c6d6fa5f7dd26ddd7c7b88fd5eae87af0d5a0afe341b72a36232054885302b78b7a820a702841d8d07861a6ea33e96ffe25630e63487434487435350473381fda8d02ba56221594543e4cd36e67f0f5e98b5423c3464f91df6a3f60cba934b4c5a457d47ebd98e30dd8336e11bb33ff0cbcebea204aa7b374f068781668e2ba82ee7e444f6911132350a8ca6c8ef140ed0de5", 0x1000}, {&(0x7f00000010c0)="0c2a4da89755859456934a919e0e7f666aece4420887eceb6e85cdfdc95c48352b46c3c1413703d1653ef6ff9f0b88310a481546195f29b40c03982c50f96e110cc9bfbf2f8a7262a283f5da1943823416d1dc38c13d6f8daf52503fc2f9406346a03119a71a589e267f355358320a62478d6cfb8537eff20c868b514800d3e179e2cc4c876d99374b9745d74baf9f0a0819743a4b74e8", 0x97}, {&(0x7f0000001180)="01f9ab6c7a5a9e76deec29382c2611a5b6", 0x11}, {&(0x7f00000011c0)="1d8e809937b08c9d2adcd13e1a6a20dabeabb7356743ec26359124c69121eaaf4349a373d398381c", 0x28}, {&(0x7f0000001200)="b700584460c592a78af467b137151d55258032480a932dbd5f6ad5a35a625417ba7c", 0x22}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="75d59cd978c647df20728e25c3e7ca35804ead3bc041e3537bce14b4116d3c5c83403b2855727c1c9343bad3df067527f199afd5431db73491d8917d31585026628428e9703143a7a814b0051a8f89150e17fe74364c9d7205251a218398b553510b1fd86aa01349b48079111eaa46ca019c5686711db0fc22c82292934be1cc98d5045c6b2993d91cf0b690416c0937a1d0a425f49b041cd29e03bfe21379320cbc462b47a85ed034d05621a9d70e0ecb0c135d943c3efbbbbb1a", 0xbb}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000002300)="18080cdcdd64a2973bf9cf8859d3f6c93455bd5fb3961ecccf3e11730b210f0e0adcb55dbec49450beef8757e07fce4d70648e53e6e49acd56343ebc0a683a1c806165727a333ec1fa73e5faca4bbbfc7736ad9f9b41ce923ffaae9663f646b4ba3a5fee3aa7d354d1d4a78333bf86f4ce4d14b41c2345749fdc0e", 0x7b}, {&(0x7f0000002380)="f1a1b81b405a7efb4d6c0fb546d35c2d4464b2b2c2b31e6d18dcc4ed21ca053b7c59ac9dd2f7ea817b63a83701a20d7b00ea2add4eb7dc901a33db461b97f2ed3ae615e5681dafbf87f2b5d40c9545b78000611a85e717db6bca728372b746924096a3d3ab9e5e8e96403ef3a3efd634b5a66e1c2374f4c03d25f901c33e1c7f0be8e944e821f2e38b36b80463dd9de9f69a584dcc26ea4efb727434beb41cb2", 0xa0}], 0xa, r3) connect$unix(r1, &(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e) [ 283.042052] binder: BINDER_SET_CONTEXT_MGR already set [ 283.055610] binder: 15947:15965 ioctl 40046207 0 returned -16 [ 283.069113] binder_alloc: 15947: binder_alloc_buf, no vma [ 283.074956] binder: 15962:15967 unknown command -378552307 [ 283.081099] binder: 15962:15967 ioctl c0306201 200001c0 returned -22 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 283.108249] binder: 15947:15965 transaction failed 29189/-3, size 0-0 line 3254 [ 283.117750] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.131358] binder: 15962:15979 unknown command -378552307 15:34:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/\xf0M*m\xe7,\xd7\xdeb+\x95\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04w8p\xf4\xf7\xf5$\xc6\xe0:\x9f%\x19\x9d\x82\xccO\xf0\x1b\xab\xfa\xd42\xc7X\xb8\x19\x980\xcc\x04\xeb?3 \x0ef\xf9\x90\xd2\x14 B\xe7DSZ#\t\xf5qVm\x19\x13U\x00.dISr!\xe5\xb0\xb6\v\x00\x00\xec=\xb4\x8a\xd5\xfa\xf6m\x16\xc1_\xc0\xeb\xac\xe5\x95\xe5\x1dn\x1a\xa4{\v\x82\\s[[\xc2\x9b?u\xba\x1b\xcc\xa8\x94\f\x87\xc54\xd2+\xefCM\x89sd\x9bc[\xa4\xd8\x87b\xb9\x98\xf6+\x86\x17\xe0\x00\x99\xd3\xe2(\x93\x9d\xdcx\xba\xf3wr}%~\xdc&\xb1\xdd\xa9$\xa8\"\xe2\xbf\x84J\xe9\x01\x1e\x81\xd8\xd2\xc9\b2-\xfd\x92I8\x1d=\xc9\xc2\xa5\xc5\xa3\x11\x81\x03\x95\xc0\xaeZ\xe4nR\xd0u>\x8d\xb08\xc5g\x10\x03t\x93\x8e\xec\xd4a3\x8a\xb2\xa1\xcd\xc8\x9d\x10\xdf\xf1p\xa2\xf9+\xef\x7f%yw\x1ek\xa3\"\xa3\x9e\\\xb5\x99\xe1\xc4r@\xba\x9a\xb64\xb0F(;\xf8#\x0e\x7f\x04\xd7\xcb`6\xeb\xbc\xf5\xf8o\xe7\xf6\xfd\xcd\x934r\xdf\xbd\xe1^\xe3\x11Nx\xc8z\xe9\xe7`\xd6#\xf4 N\xa4$\xf6\xa3o4\t\xaae\xebd\x0e \x96') 15:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000300)={@local, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000280)={@local, 0x42, r3}) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x2002}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c47a2828bc84e10f08b3dba39114d464f6ed9165a0e6587b0642d2b25ef0b1c650d4c2b31e50c150dc38271150e960b189916ce5f3374fd9927294ca1a1557c98f9550f62a3df487cff49f766faf11b938ac0e5f1cbedefffc6014fe0e07d9b00c99a453f7dc3cf67a5723f85fb68ff206cfdd3a4499d3ee274fe7e89211792a35e9ae768478dec6707b533eef878ff1f5f1c221d736ad550713e76ba1924388dde"], 0x0, 0x0, 0x0}) 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:34:05 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03d0b340", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000740)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x1, 0x478, [0x0, 0x20000200, 0x20000618, 0x20000648], 0x0, &(0x7f0000000180), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x4, 0x88e7, 'veth1_to_team\x00', 'veth1\x00', 'ip6erspan0\x00', 'eql\x00', @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x2d8, 0x3a0, 0x3e8, [@bpf0={'bpf\x00', 0x210, {{0x5, [{0x306, 0x400, 0x8, 0xfff}, {0x1, 0xffff, 0x5}, {0xfffffffffffffff8, 0x7750, 0x1, 0x2}, {0x5, 0xc4cf, 0x80000000, 0xfff}, {0x4, 0x8, 0x124b, 0x800}, {0xfff, 0x3f, 0x8e5e, 0x9}, {0xfffffffffffffff7, 0xe37, 0x4dc96575, 0x9}, {0xfffffffffffffff9, 0x7b, 0x7ff, 0x3}, {0x0, 0x1f, 0x7}, {0x4, 0x1ff, 0x5, 0x2}, {0x4, 0x1d49, 0x2}, {0x1, 0x50, 0x81, 0x7fffffff}, {0x100000001, 0x2, 0x2, 0x401}, {0x2c5d7a4e, 0x4, 0x5, 0x4}, {0x7c3e, 0x3, 0x6a44, 0x100000000}, {0x3, 0x30, 0x4, 0xffffffffffff924b}, {0x0, 0x0, 0x0, 0x970b}, {0x800, 0x8, 0x7, 0x3}, {0x507d57c7, 0x3f, 0x6, 0xfffffffffffffff9}, {0x9, 0x5, 0xd3, 0x20004}, {0x6, 0x10000, 0x8001, 0x9}, {0x7, 0x2, 0x1}, {0x20, 0x67, 0x1000, 0x8afb}, {0x3f, 0x1, 0x4564, 0x5f2b}, {0xff, 0x9, 0x1, 0x4454}, {0x4917, 0x3d9d662a, 0x2, 0x30}, {0x2, 0x8, 0x3, 0x2}, {0x10001, 0x3, 0x101, 0x9}, {0xcec, 0x59, 0x0, 0x1}, {0x20, 0x2, 0x3, 0x5}, {0x10000, 0x0, 0x8, 0x7ff}, {0x7, 0x400, 0x4, 0x9}, {0x1, 0x4, 0x3, 0x5e}, {0x8, 0x40, 0x4, 0x28ef}, {0x4, 0x0, 0x0, 0x10001}, {0x5, 0xe956, 0x1, 0x7}, {0x9, 0x4, 0x1, 0x94a8}, {0x4, 0x5f, 0x1, 0xff}, {0x7fffffff, 0x9, 0x7ff, 0xffffffffffffff7f}, {0x9, 0x4, 0x6, 0x3f}, {0x4, 0x20, 0x9, 0x100}, {0xffffffffffffbad2, 0x80, 0x9, 0x7ff}, {0x889, 0x1, 0x800, 0x59}, {0x3, 0x615, 0x4, 0x5}, {0x0, 0x7, 0x1e, 0x2}, {0x7, 0x8, 0x0, 0x6}, {0x7f, 0x5, 0x76aa3cb6, 0x100000001}, {0x7, 0x9, 0x0, 0x100000000}, {0x7, 0x4, 0x83c, 0x6}, {0x6, 0x17, 0x80d, 0x6}, {0x8, 0x3f, 0x4, 0x2c0}, {0x1, 0xffffffffffffffff, 0x35c958ef, 0x8}, {0x5, 0x3ff, 0x914, 0x3}, {0xfffffffffffffffe, 0xbc1, 0x1}, {0xfe, 0x5, 0x0, 0x40d}, {0x3f, 0x400, 0x401, 0x4}, {0x7, 0x4, 0x81, 0x100}, {0x2, 0x8, 0x5, 0x8}, {0x4, 0x7fffffff, 0xc4, 0x7f}, {0x10000, 0x80, 0x4, 0x5}, {0x0, 0x100000000, 0x6, 0x6de}, {0x4, 0x0, 0x0, 0x9}, {0xffffffffffff8000, 0x4, 0x400, 0x1}, {0x7, 0x1, 0x76, 0x81}], 0x7ff}}}, @state={'state\x00', 0x8, {{0x7}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xe96e, 'syz0\x00', 0x7fffffff}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x2, 0x3, 0x0, 0x0, "d0e781f466e45f911c9ebdb7a1735b08a6dcefdc0c6f7b3dd77de95c8d68fc977a350906ddd5f3fcc2c47d91426197f2950b04c677bbaecc04ef8eeb8a541f97"}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"b84b01270b91ac92401909def764263683684a28cb4ce113a1d241c59dbf"}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x4f0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000140), 0xfffffffffffffffd) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x400000013) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x4) [ 283.137346] audit: type=1400 audit(1553700845.082:54): avc: denied { bind } for pid=15971 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 283.139163] binder: 15971:15977 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 283.165850] binder: 15962:15979 ioctl c0306201 200001c0 returned -22 [ 283.178176] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.183917] binder: 15973:15980 ioctl c0306201 0 returned -14 [ 283.195457] binder: 15971:15977 unknown command 0 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 283.232322] binder: 15971:15977 ioctl c0306201 20000100 returned -22 [ 283.258303] binder: 15988:15994 unknown command 1085526019 [ 283.265489] binder: 15987:15992 ioctl c0306201 0 returned -14 [ 283.274670] binder: BINDER_SET_CONTEXT_MGR already set 15:34:05 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x4e4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x2, r2}) gettid() r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x80000001) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)=""/170, &(0x7f0000000100)=0xaa) syz_open_procfs$namespace(r2, &(0x7f0000000300)='os/uPL\x1a0\xfa\xf8k=W\x88^ts\x00\x99\xa1\xbbpHV\x95\xc9L\xfc\x8d\xee\xa3\x9dp\xab\x8d\"\xb3xo\xee\xf2\xd6\x05D\xef\a\xeco\x06B\x83\x0e\xc1P\xb22c\xdc\xf6\xfc\x9d\f^\xd0\x94\xbbZ\x19\xa5\xd4\x00\xccg{\xe6-\xca\xa6\xd0\x18S\x86\xd7\x15\xfbR\xec\x1f\x83\xbf=Y\x8b\x05\xca\xf1Ll\x96\x86J<\xee\bI\x06\xd5\x15\x8dhU\xb9\xb8\x01\xc8\x18\xc8\x1b\xf3kXhr*\xa4T&') ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000200)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') ioctl$TCSBRKP(r3, 0x5425, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xfc8) 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 283.281520] binder_alloc: binder_alloc_mmap_handler: 15971 20001000-20004000 already mapped failed -16 [ 283.290230] binder: 15988:15994 ioctl c0306201 200001c0 returned -22 [ 283.293949] binder: 15991:15997 ioctl 40046207 0 returned -16 [ 283.309241] binder: BINDER_SET_CONTEXT_MGR already set [ 283.315045] binder_alloc: 15971: binder_alloc_buf, no vma [ 283.323451] binder: 15971:15977 ioctl 40046207 0 returned -16 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 283.335508] binder: 15988:16004 unknown command 1085526019 [ 283.341431] binder: 15971:15984 transaction failed 29189/-3, size 24-8 line 3254 [ 283.346354] binder_alloc: 15971: binder_alloc_buf, no vma [ 283.355319] binder: 15971:15999 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 283.371859] binder: 15988:16004 ioctl c0306201 200001c0 returned -22 [ 283.375602] binder: 15971:15999 unknown command 0 [ 283.380912] binder: send failed reply for transaction 861 to 15971:15977 [ 283.399212] binder: 15971:15999 ioctl c0306201 20000100 returned -22 [ 283.402775] binder: 15991:16001 transaction failed 29189/-3, size 0-0 line 3254 [ 283.417424] binder: undelivered TRANSACTION_ERROR: 29189 15:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000001, 0x22912, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:05 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x27c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf55}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25e2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x81, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @rand_addr="1461356b583af10b2830bfcf21a7bf83", 0x9}}}}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4010}, 0x24000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000480)={0x2, 0xe6, 0x0, 0x8001}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 15:34:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000100)='ns/net\x00'}, 0x30) seccomp(0x0, 0x1, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x7fffffff, 0x8, 0x1, 0xc56b}, {0x6, 0x7fffffff, 0x7, 0x6}, {0x8, 0x7, 0x3, 0x8}]}) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/net\x00p\xe0\xc3\xeb5\xf1\xf9s\xf2\x16,4D\x9fK\xbb\xc4\xef\xca\xc6\x019\a\x1a\xbf\x84%\x1cm\xb2\x93 J\xf8\x88v\xc8n}v\n\xb8\x98\x03\xa3\x0f\xf3\x99\xed\xed)f\xf7\xd9\xd1aZ\xb5>\xaf\xf8\xd7\xa3g~[\x02\x12\x18\xce\xea\xe8\xf5\xd0\xd9\xd9>%\x9e\x93\xb33\xde_\xfeD\xd5\xdak\x9cx\x95-\x7f\xfbq}\x05\xd7Z\t\x8f0\x11\xc1\x9a\xefqi\xd6\x03\xbd\xefY`\x15\xe9\xa7#Q') ioctl(r1, 0x5, &(0x7f0000000180)="1bde794baee56fc7b1c20b55ab578138235b6ce3734bdeb37cb6fd5c57511af46c8b2b31b6eb653bfe4d8ce3ac5ad157f82e74ae3f23dd91697e1a098794245bb3a134cce5d138b7fd7728bb0f825abab697b114d4fae64025c90ef4f881c72ad8aa1964cd6455b8d8423fb47554c8cd51312c80bcf7325bd723c1ec981b67e6") r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) [ 283.439306] binder: undelivered TRANSACTION_COMPLETE [ 283.447226] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.464467] binder: 15991:16001 got transaction to context manager from process owning it [ 283.481438] binder: 15991:16001 transaction failed 29201/-22, size 0-0 line 3108 [ 283.503496] binder: BINDER_SET_CONTEXT_MGR already set [ 283.518849] binder: 16018:16022 BC_FREE_BUFFER u0000000000000000 no match [ 283.524181] binder: 16021:16027 ioctl 40046207 0 returned -16 [ 283.526263] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.543913] binder: 16021:16027 transaction failed 29189/-22, size 24-8 line 3117 15:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r2}) 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) [ 283.556933] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.576481] binder: 16018:16038 BC_FREE_BUFFER u0000000000000000 no match [ 283.591788] binder_alloc: 16021: binder_alloc_buf, no vma [ 283.594220] binder: BINDER_SET_CONTEXT_MGR already set 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) 15:34:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 283.609519] binder: 16021:16039 transaction failed 29189/-3, size 24-8 line 3254 [ 283.612198] binder: 16033:16041 ioctl 40046207 0 returned -16 [ 283.636702] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.651610] binder: 16033:16049 transaction failed 29189/-22, size 0-0 line 3117 15:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000100)=""/91) 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 283.654090] binder: undelivered TRANSACTION_ERROR: 29189 15:34:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r1 = dup(r0) write$selinux_validatetrans(r1, &(0x7f0000000000)={'system_u:object_r:setfiles_exec_t:s0', 0x20, 'system_u:object_r:removable_device_t:s0', 0x20, 0x0, 0x20, '/usr/sbin/cupsd\x00'}, 0x72) 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 283.696114] binder: 16048:16056 BC_FREE_BUFFER u0000000000000000 no match [ 283.711640] binder: BINDER_SET_CONTEXT_MGR already set [ 283.724359] binder_alloc: 16051: binder_alloc_buf, no vma [ 283.738716] binder: 16033:16049 ioctl 40046207 0 returned -16 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x83, 0x0, &(0x7f0000000100)="10e69b14805441e03395e125ee496292a891774343f992b5cd96deee4dc646474d949d36c53ba304bbb6def9597ed0c8b5d5e697edd0146c2bd887be5be47e6a412d4968e368c47c4e7bca0078507346ed51db8e966b42e51d83cd21fd4a87a090275ff8717370131c31846ad4a7968b49238e8c2f5a38bb52c6f5232ad831b7c1057c"}) [ 283.751478] binder: 16051:16057 transaction failed 29189/-3, size 0-0 line 3254 [ 283.768925] binder: release 16033:16041 transaction 877 out, still active [ 283.772588] binder: 16051:16068 ioctl 4b60 20000100 returned -22 [ 283.778373] binder: undelivered TRANSACTION_COMPLETE [ 283.787926] binder: 16048:16056 BC_FREE_BUFFER u0000000000000000 no match 15:34:05 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r2 = dup(r1) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x9) 15:34:05 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/252, 0xfc) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 283.799778] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.799813] binder_alloc: binder_alloc_mmap_handler: 16051 20001000-20004000 already mapped failed -16 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 283.871511] binder: BINDER_SET_CONTEXT_MGR already set [ 283.881465] binder: 16081:16085 BC_FREE_BUFFER u0000000000000000 no match [ 283.887660] binder: BINDER_SET_CONTEXT_MGR already set [ 283.898977] binder: 16078:16083 ioctl 40046207 0 returned -16 [ 283.906299] binder: 16051:16057 ioctl 40046207 0 returned -16 [ 283.917195] binder: 16051:16068 got transaction to invalid handle [ 283.926040] binder_alloc: 16051: binder_alloc_buf, no vma [ 283.928361] binder: 16051:16068 transaction failed 29201/-22, size 0-0 line 3117 [ 283.940882] binder: 16078:16092 transaction failed 29189/-3, size 0-0 line 3254 [ 283.943982] binder_alloc: 16051: binder_alloc_buf, no vma [ 283.955948] binder: 16051:16057 transaction failed 29189/-3, size 24-8 line 3254 [ 283.964589] binder: 16051:16089 ioctl 4b60 20000100 returned -22 15:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8104000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:05 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80800, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000200)='./file0\x00', r2, r3, 0x800) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x22) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0xfffffffffffffc01, 0xfffffffffffffff9, 0x3, 0x7f}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() lchown(&(0x7f00000000c0)='./file0\x00', r4, r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18608084}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008014}, 0x81) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116378c4", @ANYRES64=0x0], 0x213, 0x0, 0x0}) 15:34:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0xffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:05 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r2 = getpid() ptrace$getregs(0xffffffffffffffff, r2, 0x8, &(0x7f0000000440)=""/222) r3 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r4, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$search(0xa, r1, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) sendto$inet(r6, &(0x7f0000000540)="c72ef62794a052a64b7ca5ad0eab52d2290d64141342b192b6aa61d5d71400a5c7379b54ff2fad90bd18012c1ccc97c73863cb5fd082113a4c5d7a00adc4527da78f23b11bbee165575df88aaaf1025b862928c0c636da0de3867c034b5d9c8fce34691287f5512e", 0x68, 0x40000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x4a1a}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="006340400000000000000000000000000050e4000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000fe8865c93309b37bfd453d99fb18da56411ff24e264d07c79feb3812ef226971c3a1811c56"], 0xfffffe7d, 0x0, 0x0}) 15:34:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:05 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0}) [ 283.972109] binder: undelivered TRANSACTION_ERROR: 29189 [ 283.977903] binder: send failed reply for transaction 873 to 16051:16057 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 284.017348] binder: BINDER_SET_CONTEXT_MGR already set [ 284.027025] binder: send failed reply for transaction 877, target dead [ 284.029886] binder: BINDER_SET_CONTEXT_MGR already set [ 284.041402] binder: 16097:16105 ioctl 40046207 0 returned -16 [ 284.057291] binder: BINDER_SET_CONTEXT_MGR already set 15:34:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = syz_open_pts(0xffffffffffffffff, 0xa4841) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xffff, 0x80000001}) 15:34:06 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 284.063694] binder: 16100:16106 ioctl 40046207 0 returned -16 [ 284.074302] binder: 16103:16110 ioctl 40046207 0 returned -16 [ 284.076361] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.087988] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.091948] binder: 16103:16110 transaction failed 29189/-22, size 24-8 line 3117 [ 284.095080] binder: 16097:16114 Acquire 1 refcount change on invalid ref 0 ret -22 [ 284.107065] binder: 16103:16110 got transaction to invalid handle 15:34:06 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="a21e88b0003eba2e31465b6ec24c290800043d295adc1772cde103aab5f7823f78471b21ae2b75d97ef0e1e69638f14a47466fea0f644f2da9e1f29ab07d681bf8d6c3cdffd3acc7c500e13e61bd5cb3e7ef3688aca1c7fa2ba932ac8531a8746e185ee38759ec1c422c8288ee39f9d8b7150e7e502e392961b9b91530ad595187d967fd1fc832470b21ac3b888a0f2b5f6006a9e72d2d6d744e80cba6883a67a6115149c46952991e426fd66525e7c469eff04592817286d61b18ede3fce303553a205838e6027e460caf05d14cbc23919203635ab2bcc6705259b73c22ddf959af64dd93ca659e53728ec46a97b3cad39aef7801cb1e98", 0xf8) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x401, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x10, 0x1, 0x8}}, 0x14) [ 284.122420] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.135199] binder: undelivered TRANSACTION_COMPLETE [ 284.145579] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.147394] binder_alloc: 16097: binder_alloc_buf, no vma [ 284.152286] binder: 16121:16124 BC_FREE_BUFFER u0000000000000000 no match [ 284.158003] binder: 16103:16110 transaction failed 29201/-22, size 0-0 line 3117 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:06 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/235) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 284.176036] binder: 16121:16125 BC_FREE_BUFFER u0000000000000000 no match [ 284.183268] binder: 16100:16106 transaction failed 29189/-3, size 16777216-0 line 3254 [ 284.183288] binder: 16100:16106 ioctl c0306201 200000c0 returned -14 [ 284.192876] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.249079] binder_alloc: binder_alloc_mmap_handler: 16103 20001000-20004000 already mapped failed -16 [ 284.262745] binder_alloc: 16103: binder_alloc_buf, no vma [ 284.268614] binder: 16103:16136 transaction failed 29189/-3, size 24-8 line 3254 [ 284.278779] binder: 16103:16110 got transaction to invalid handle [ 284.285400] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.295005] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.296088] binder_alloc: 16103: binder_alloc_buf, no vma [ 284.300786] binder: 16103:16110 transaction failed 29201/-22, size 0-0 line 3117 [ 284.307070] binder: 16126:16134 transaction failed 29189/-3, size 0-0 line 3254 [ 284.317208] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.330829] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.334031] keychord: Insufficient bytes present for keycount 14 15:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffe, 0x2b5, 0x9}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:06 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r2 = getpid() ptrace$getregs(0xffffffffffffffff, r2, 0x8, &(0x7f0000000440)=""/222) r3 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r4, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$search(0xa, r1, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) sendto$inet(r6, &(0x7f0000000540)="c72ef62794a052a64b7ca5ad0eab52d2290d64141342b192b6aa61d5d71400a5c7379b54ff2fad90bd18012c1ccc97c73863cb5fd082113a4c5d7a00adc4527da78f23b11bbee165575df88aaaf1025b862928c0c636da0de3867c034b5d9c8fce34691287f5512e", 0x68, 0x40000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x4a1a}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="006340400000000000000000000000000050e4000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000fe8865c93309b37bfd453d99fb18da56411ff24e264d07c79feb3812ef226971c3a1811c56"], 0xfffffe7d, 0x0, 0x0}) 15:34:06 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) readahead(r0, 0x0, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:06 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80000, 0x0) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0xc0, 0x0, 0x2}, 0x2}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="08abfb37ab8eba90feb68d90e5924fe5dff1a6e814245d8fae3fd94145f7bb51c96b725a30e0721985363f2f1f3fb1e92d4edfe3def82abe73644e5887262b006d3f56cb42028d25321e679b5e58efbb9e79c0f4ef25de9b6fdf8d9c8bd4a9d8161b1643bf7f54cc2270b6a17e9f1ce7a08cedaf17dbf444f5d21e5fcde0aed4f73850f0956f71f7", 0x88, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x1, r3) 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 284.344745] binder: 16126:16142 transaction failed 29189/-22, size 0-0 line 3117 [ 284.365378] keychord: Insufficient bytes present for keycount 14 [ 284.378310] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.382329] binder: 16145:16154 ioctl c0185879 20000040 returned -22 [ 284.384195] binder: undelivered TRANSACTION_ERROR: 29189 15:34:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x10\x94Jn\x81:&\xb1\xbb)e\x87\xba\xa8oYK\x9e\x14|\x91\x8a\x8e\xa9\xef\xba') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000480)='ns/pid\x00') r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/ipc\x00') r5 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@caif=@dbg, &(0x7f0000000240)=0x80, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x93}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000500)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x70, 0x2, 0x3, 0x49, 0xbca, 0xff, "9120ec5b1d6f34e08df4addd02d6bd9a6556c7774c02b53039bea9fa9ebce8270172f60b170a7a5b212882d7ececea0f9ced3324d10342674ed4222d667f145a294986b8820fd15ebba6e0734225b27929a4d887306c3aeefcf9af1aa540300133558402e2dfdacd8acd23b9bfdc807a"}, 0x188) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0x5c40, 0x8}, {0x9e3, 0x1ff}, {0x1000, 0x3acb90a1}, {0x8, 0x10000}, {0x9, 0x7fff}, {0x80, 0xffffffffffffff00}]}) readahead(r4, 0x800, 0x9) 15:34:06 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 284.398032] binder_alloc: 16145: binder_alloc_buf, no vma [ 284.398221] binder: 16149:16152 BC_FREE_BUFFER u0000000000000000 no match [ 284.406320] binder: 16145:16154 transaction failed 29189/-3, size 0-0 line 3254 [ 284.434611] binder: BINDER_SET_CONTEXT_MGR already set [ 284.439964] binder: 16147:16153 ioctl 40046207 0 returned -16 [ 284.448816] binder: 16145:16161 ioctl c0185879 20000040 returned -22 [ 284.459349] binder: BINDER_SET_CONTEXT_MGR already set [ 284.464984] binder: 16149:16162 BC_FREE_BUFFER u0000000000000000 no match [ 284.474768] binder_alloc: 16145: binder_alloc_buf, no vma [ 284.476715] binder: BINDER_SET_CONTEXT_MGR already set [ 284.480831] binder: 16157:16163 ioctl 40046207 0 returned -16 [ 284.486543] binder: 16145:16161 ioctl 40046207 0 returned -16 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:06 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x400, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0x1}]}) ioctl$KDMKTONE(r1, 0x4b30, 0x1c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffac1414bb0100000008000000e0000001ac1414aaac141429ffffffffe000000200000005ac1ebeae8dab9adc26238d795370403d0101ffffffff"], 0x30) [ 284.498060] binder: 16145:16161 got transaction to invalid handle [ 284.504280] binder: 16147:16153 transaction failed 29189/-3, size 16777216-0 line 3254 [ 284.504466] binder_alloc: 16145: binder_alloc_buf, no vma [ 284.526721] binder: 16145:16161 transaction failed 29201/-22, size 0-0 line 3117 [ 284.527905] binder: 16147:16153 ioctl c0306201 200000c0 returned -14 [ 284.538002] binder: 16145:16154 transaction failed 29189/-3, size 24-8 line 3254 [ 284.541456] binder_alloc: 16145: binder_alloc_buf, no vma [ 284.549029] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.560129] binder: send failed reply for transaction 893 to 16145:16154 [ 284.571155] binder: 16157:16163 transaction failed 29189/-3, size 0-0 line 3254 [ 284.578918] binder: undelivered TRANSACTION_COMPLETE [ 284.586964] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.593456] binder: 16169:16173 BC_FREE_BUFFER u0000000000000000 no match 15:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000b36d153ba1db007347a2a35f99ef1d313962e0805e9a2596ee90c969935b6bbe8d8f83a7600c33b3dfc129bf1038e352eb484d15909dc48682d8974c"]], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x4001, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x40000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/softnet_stat\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) [ 284.598649] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.612584] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.633795] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.641172] binder: 16169:16173 BC_FREE_BUFFER u0000000000000000 no match 15:34:06 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r2 = getpid() ptrace$getregs(0xffffffffffffffff, r2, 0x8, &(0x7f0000000440)=""/222) r3 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r4, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$search(0xa, r1, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) sendto$inet(r6, &(0x7f0000000540)="c72ef62794a052a64b7ca5ad0eab52d2290d64141342b192b6aa61d5d71400a5c7379b54ff2fad90bd18012c1ccc97c73863cb5fd082113a4c5d7a00adc4527da78f23b11bbee165575df88aaaf1025b862928c0c636da0de3867c034b5d9c8fce34691287f5512e", 0x68, 0x40000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x4a1a}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="006340400000000000000000000000000050e4000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000fe8865c93309b37bfd453d99fb18da56411ff24e264d07c79feb3812ef226971c3a1811c56"], 0xfffffe7d, 0x0, 0x0}) 15:34:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/96) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='n\xe5\xa8net\x00\x1e\xa3\x83S\x14;\xe6\xac&\xb5\x8e^\xb32\x80\x03\x96\x91:/\xf55\xb0\xff3]\xe9tn\xc7\xd8\xf5\xe6EAU\xd9MUp\xda\xb1\xd0e%{9h\xa7\xd3_\x10\x1c+\xdc%\xce\xfd\x7f\x1e~\xbc:\xda\x01VE\xb1\xbc(zX\xf9\x01\xd0') pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="9692e7cbfb92f0c301fb1c6dee0151fb6691412f2f2b4cd95204827eefae8ea0fd6f8d55a7448016631ca47b6500d6b139db083a3b794c7548f6a09675bb7c529882bf91bed05e50a71ece1c73c595be19a65f03aaba18380a10603ca9a4318b8822bb2ae70162026e41ef85cef1db75bb2a99b111d80aa7878fbca837936d648dbcc7b1927d28ae60894d3f768dbb1703b01387ef361efac2ec70da17f7e57ef8a49359e98f967a592432edf230bc7ff01e17de2e8ec81cce0e9b5674adadcfbc432c4d228d2048f3651a56285469be2732b7fb472e3dd3010580f80eee649a7c26f265e4d8161fe3933d17", 0xec}], 0x1, 0x0) 15:34:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:06 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x12000, 0x0) [ 284.661273] binder_alloc: 16176: binder_alloc_buf, no vma [ 284.668554] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.675056] binder: 16176:16182 transaction failed 29189/-3, size 0-0 line 3254 [ 284.690756] binder: release 16181:16185 transaction 908 out, still active 15:34:06 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) fdatasync(r0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x100, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x0, @local, 0x4e20, 0x4, 'none\x00', 0x1, 0x136, 0x11}, 0x2c) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000001c0)="2aa7780ce1f51896aac1f3b0e7b791effdbb955043678a527f") syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') [ 284.734116] binder: undelivered TRANSACTION_COMPLETE [ 284.740552] binder: BINDER_SET_CONTEXT_MGR already set [ 284.745859] binder: 16189:16197 ioctl 40046207 0 returned -16 [ 284.755987] binder_alloc: binder_alloc_mmap_handler: 16176 20001000-20004000 already mapped failed -16 [ 284.758428] binder: BINDER_SET_CONTEXT_MGR already set 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 284.787464] binder: release 16181:16185 transaction 906 out, still active [ 284.787594] binder_alloc: 16176: binder_alloc_buf, no vma [ 284.795343] binder: undelivered TRANSACTION_COMPLETE [ 284.800534] binder: BINDER_SET_CONTEXT_MGR already set [ 284.806334] binder: 16196:16203 BC_FREE_BUFFER u0000000000000000 no match [ 284.818099] binder: 16191:16201 ioctl 40046207 0 returned -16 [ 284.828851] binder: 16196:16208 BC_FREE_BUFFER u0000000000000000 no match [ 284.836338] binder: 16176:16182 ioctl 40046207 0 returned -16 [ 284.839474] binder: 16176:16211 got transaction to invalid handle [ 284.848360] binder_alloc: 16176: binder_alloc_buf, no vma [ 284.854463] binder_alloc: 16176: binder_alloc_buf, no vma [ 284.859381] binder: undelivered TRANSACTION_ERROR: 29189 [ 284.860202] binder: 16176:16200 transaction failed 29189/-3, size 24-8 line 3254 [ 284.860341] binder: 16189:16197 transaction failed 29189/-3, size 16777216-0 line 3254 15:34:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 284.866318] binder: 16176:16211 transaction failed 29201/-22, size 0-0 line 3117 [ 284.874571] binder: 16191:16206 transaction failed 29189/-3, size 0-0 line 3254 [ 284.882395] binder: send failed reply for transaction 903 to 16176:16182 [ 284.890323] binder: 16189:16197 ioctl c0306201 200000c0 returned -14 [ 284.920744] binder_alloc: 16191: binder_alloc_buf, no vma [ 284.928445] binder: send failed reply for transaction 906, target dead 15:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) stat(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000003000)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000006880)=0x0) stat(&(0x7f00000068c0)='./file0\x00', &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000069c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000006980)='/dev/binder#\x00'}, 0x30) lstat(&(0x7f0000007dc0)='./file0\x00', &(0x7f0000007e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008280)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000008380)=0xe8) fstat(r0, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000008480)={&(0x7f0000002cc0)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008200)=[{&(0x7f0000002dc0)={0x68, 0x1c, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x58, 0x47, [@generic="eae9789cf3bd76eebe6164382ba0fc0573033aa27cfa1efbae3f4753b96eced2decd51f9e977be838d3f402e3d6a5337b3ce0db04411fe7edf022e", @typed={0x8, 0x44, @ipv4=@multicast2}, @typed={0x8, 0x6a, @uid=r3}, @typed={0x8, 0x52, @fd=r1}]}]}, 0x68}, {&(0x7f0000002e40)={0x1a0, 0x16, 0x408, 0x70bd2c, 0x25dfdbfb, "", [@generic="6501758bce35c43e26ff60f86a0d168fd8928a0630f5198886fadcf11e9f19dd3e8f98c9930df74fb84b2d0b1d93e9cf27764bd06afbe9faab2d6870f95614f05c804cf1ce9ed1c8d293094858e867a65a295177d222b1b8a52b36b1bc4d3c2b63ce16d288b4f767f26925d4e702aa872b90cb2f4e8b03bde2d1905469c63503cd03d27b672b14db89e3276f3e8d750f12ec5598f2f922cc0077ead6b23efe03210b6211b1c473b82aaf8e17b1eea6496c5a8d3305a428452adbfb16cd2d4dc434c94f", @typed={0x8, 0x79, @fd=r1}, @typed={0x14, 0x93, @str='/dev/binder#\x00'}, @generic="5a44b988d4aa3c870632f3f3cd5096f7f2054fb9243f831c58a280d4f4826cc428d9cbfd941681215580eb147745c39e4bde6ea8911148ad0dfaabda155a6b21523081f13c1159203dcd96927f67681efcf41cb52251e9b28df3819804f537202f85e494a338ddb6c60a601570b0d6ce84cc5bc74b963c056ba3d78571327b7aed3fc5d9fa6e02e4a9ae64f3b72bda099a0fcb1da3e55995b366b60cf1bf41d67879cc1ca3a4343c", @typed={0x8, 0x1f, @u32=0x5}]}, 0x1a0}, {&(0x7f0000003040)={0x1224, 0x11, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@generic="5cb63876a0b8e7e6d152e697becb3c04b5283e757de8c2464bac57bb4b51942cb057fb1e1772b98bda71f1319793c8f1422757f68facf97e74ff57998c0c4142790f65d483ecdd440e1a8431467df68f92bbd027af31180681eaa32a07c8a69b58c00ad019400f5a3b1ab176", @typed={0x4, 0x25}, @typed={0xe4, 0x2a, @binary="ea3730279f87d4fad47e97e723d65e292e983b511575ffb47d8fc05a6d8741e7fd95a6cec517e53ba404490b82c7ab8ea7138232b018fb38ac6f07c84bd3d6602083c28ca3824ff46d17925e8368d1f177299c36de833c90acd1627377490c142d929fae4a1112813516f448585e1248a5b473e9d1e6f5926cb6bc5cc7f188a1efb0134a4e15fc77ce573add2d67bd4144b8e3fdcc49b31520dee954a09dcd581fee73794beb95c1b3d76b97d534bc9beee4712d295f0e24cd6b13fe970ab3c8f56656f9b1b85b8f25c3ca51b7bbcf5a2bfd0b1df0476a7813bfad7771"}, @typed={0xc, 0x23, @u64=0x20}, @typed={0x98, 0x24, @binary="8d0b4d0c138b4e934a7d5aa31a9bf20a0525a6012ec922fd35e31d2b23f5ef1ecbecdace500c625a7a81d0190f4698e1c3dc565bbdee8309633d7d80bb450bda84868273f19c930f599ca1be5d480a831d8adcf0f8045d2df69ded19550b0aea6ef162344781d552837e6aaa343ad3bb5cbf31b6f717af27c2da38f2b41efae8e0060272bc94ee9b18b4488cf95a0361707fac"}, @nested={0x1018, 0x87, [@typed={0x8, 0x2e, @pid=r4}, @typed={0xc, 0x76, @u64=0x3f}, @generic="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"]}, @generic="9014cb5c"]}, 0x1224}, {&(0x7f0000004280)={0x25c8, 0x3f, 0x420, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x21e8, 0x2e, [@generic="fbba96019be1bf66cb37c0d91803633e1955fc0534ddc01a40832fac7e97c38d73c32bfff58757cfea2e39cfd7f6222ac5727d05db35e68f657a18c5f7750fc6b239f3dfa7997e08e055b91800af7f833dce2765c6658e18ac381a12f0c0802b", @generic="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", @typed={0x8, 0x6b, @ipv4=@remote}, @generic="3151a7736d470c86803b848bdea5d5635eb5ce129d5228a654e75947d6e91999b31948238f48889bcd738326ebb9d6574518cee40679619fc75245555a5c09edf0f79bb372133fea43b33e42abdfb61eb3ea0f8c606aae19a072d9f78bba1c041581c89ba1235a088551e6cf82f7ff8990012f9b0ec8cbf4a7a9cde5889b1e9050e33a5e9869a1f79c2b5f53b9884d59e11fd1f2ca93975b5ae5de58bdc25f507bf5118f", @typed={0x8, 0x24, @u32=0xf5}, @generic="a454f54ab7bbf37f818851", @generic="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", @typed={0x14, 0x36, @ipv6=@mcast1}, @generic="8f8634613c493b54af158d595c50d4b6a7232090c491f085849019e1057ea19f4fe5a29238c97fde9f54de838b0e2e1b4c8ae75c0b9a9491781cbcdd75d5b82003f1353667323f8f363dc091721f2f185c2d0885f823c6417c3f5325ceaed0f11c0076a5c5ec1c8b0cd5de5c4237c2304d11f8baecb2176b6c37dd74da96c8e38e2417425830745ee84d4486e9cc370b2cee5ecf9b07449d308db00516bc7c368f912176d9c4ee0e29", @typed={0x8, 0x17, @str='\x00'}]}, @nested={0x98, 0x91, [@typed={0x8, 0x96, @u32=0x101}, @typed={0x8, 0xb, @fd=r0}, @generic="898adfc6d6c1f396c5ab7ee385d5745e34af55a33adda8e14967512266fb6d02f7e37c1860aee3239ae62becc1bf4024dbb3338e8ca904aa3b6e7f9898e4f2838c67b329b66dbee2b59ea9587cb5b38e36b3d1f42c698043420b4d0d5c880503ef27386ddb0c8528988f5bbd35a8ad5583624f781a61c8e56df33eae0aea0799596ef1"]}, @generic="cabbc7dc8d24ddbfead4d2a05b4f32f97a8d90c300324066bc0b8b7dca0c02773b974ce34bc8333002ea5e9f2fe6e173a60ad1d947a1a456c688274c150eec4556dacc0afe1b5ffdf075594ba60a69dfe6a8ae06c9109a56d1e6be9bf5d9fd6fed04ba681f3af73a8d2b121b2e93d4dfdd0bc1fab2d738bf387c56422aee7170c603ee7eccbec2c224e17b195a7be3", @nested={0x2a8, 0x1b, [@generic="2a536c91c8934ba0be1d2b803080b7c0a52f3538cad4e618d48db65a0973cfeff93698db1a6556249fd0a1efaf3bc3fe78fd584b9a0d8967aec669097d90b1fcc724e3f5be669edc99e20fac204b34f46bff8607d9c7cd0d", @typed={0x8, 0x8, @ipv4=@rand_addr=0x9}, @typed={0xf0, 0x31, @binary="328209b1135ad5a8e10bc67c0fd07764d925ce1198ce6c134f0f605bb246f3e78965a193f058532a5920805434f4209507612571aae4cb634c66d0bdb3f390ad4439d42ec2952df2d8aceb5019f1ebfe119326f4ecbc870b4801d2cba3e3de7888a8f069db24e12f43b602dbc8b24354735f0732c82a5047e37e0e44eb26db25dd32320ea154b3f495893af852b603f2f21e69f18b710b2fdcdefb25f189e51ce414f19c1326b8641f34ef0395fde9e07ba0f4077ef7097b02b77eccb929f3eee161e2e4a00c08e9f913157b7238c6a3c44fbf4ce15fb9074a349bdd67b13f069f02018cd608ceefffff"}, @typed={0x4, 0x3e}, @generic="fdc30313e6bc742b42b7194b4bf260e97376431e936d14e8f0c894c9f97f015ec0790b45834858058e4e55dbdab920ab97665fa16e2b55647127bc88e7afe88ec82daab857700d21c3ee5618d809125751d7570c6181c770c89fea8971ba16b56cd624ec91474e448ca1827c7f873d89678ed62f60a9858a1f2c0128082df777e704c62751723b55d2ae3d9a0497e888d5d5cd1373f034ca7789e86d5eb20ff4862b6eab01aafc5cfd50993977d5407635cd0caf24daf5e284dea0ce8ed79e166f7d2fa81918734f7fd2123ff1bb", @generic="b6480f6c1edc53d1a8e78e8bd5a8bcd5395ded52201ea7b0d9379f8e194246216e4ee20a695a0b93ca1f22a88c0d2a800efd65d7d5e04204773e118c8285af280737d202e0f30d065d1d706febc201d823b2071d0c6a6d338ad61d31a8456a683e09bc424b6d3cfa4db5f4b8739b3057b7b29496d92adc", @typed={0x8, 0x47, @u32=0x568}]}]}, 0x25c8}, {&(0x7f0000006a00)={0x13b8, 0x39, 0x6, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x36, @fd=r0}, @nested={0x129c, 0x90, [@typed={0x8, 0x75, @pid=r5}, @generic="88c95dc0b82909f9391e1660375ffb44a01c5aaa123d2250ea0c2145c0d61241d8b0ea28ad83e64b600382fdd28ea0f1382f72fc8d777a8248fc6287d53a617f62dd23354a50", @typed={0x1004, 0x5d, @binary="60df453e88993b4b42cf6af83d6b12f733feee7e4ca8a7f0d886c7c0fd2e160ce7455375d54a836f488c8e3a047be1312bc1e441d5f1a769255a69fed77c4b5c78abe15b2ab915ea8f257bdde048cfef48c3e24d6fc8d15683e3b87379ac06cfe245a3a5d84696bf9d818fc2ea2f6f1447f012214c78ab1f17bc40110b0c5b02967e0c7cf499b5a5f33f34b287563ec22ae4a970fb6cab004aa8b07a2e0445bc43f56d4e804dda986b043af016a476d35057c97a974f1e966a1110a84f919d952bdf8728f2a8e4c38fd076edccd1698caea2f856c9c3d3668ca8834a3ea018081194ae37a2134d890baff44975a5b85f81e438e34a29bfe201fa705e0f364c7651146914c7984ae15b4e9215e50e24d3f10adba13cd93375c2170fe12d0b78c21c0ef3d0032a48767fb025de307a5dbe25ffb9a3f5a75dc36103dfc9b1bbc4f19d499d37137ed936f5fa0226d411d939ae98ca890b03f0b478a968c2fe4f96b1fab21eeee139e8f4ff0ff0e3f387aa6ba7b726e5a95085a74c20073eeaf166421628e31f28aa951b8f027f42ea2fbe621fa2e879af7f70d3d69b859e1ac55ffb047652e66b49219fb9bd43e0d2e6b6d9531c2049bacb3c632e5ff0a65c1705a97147618a0b6b1ae87692aaa6bf3394ae8cbee4584acea2a4f5e397531f487805dd190f15acef33c2f65b3f212f5975e21ffba2d455b297a2dc6dfd6c15909e9e1cd9b899abc8bbc7e052f829a497ffaa36093d720e01b6604192ae8d59852b7e7e0348fef227e654ba83ed212305bb62eac991da1c642eca74513ec5d068aad0bbb37733253da4c04b363d40481498e826e799ad99867a75b81659e6dcfc013a19f3d75222474e3283e3a1a52e1047c9afe9316b968929c17bc7d0ee11099391b1fb2cfc2f2dbfcd34da5b0bb9cc229104fb69b911d014bb75f90157bf368b370e01fd1332c569fff9527966e7e9b5a8bee6c4c1af3da0a5837131bd8dd8b6981ef6c1f88f508bdae5bd22dad5cc2b4d998369ae03b68a32a4b7a4b5b21b362a2d993bd9f2007395e329951ea95e0aa2ea86890b8158ef7d6aa7d56e267416b8d88c4922222f4a03a6175d13108b64eff5e5544fe8c95e26d9f0fb48bb422d2a8abe32301af2c44631b87f7a5fc311d920765a11c2c68d73fd3dcd2cc13b0eccf7980133ee69ed397a699ab36a88c82bb4f396c25de520a5babb944d77958aeafc8ffc6145e367d6c34b2b3ff500d0f245f595142c56bc114992c4ceb1a6d363d8a3ba3495de00a871a0a600696fc8b9916a9e21a38cf020d013a30dc67dbdc0daa1327c37ea0609b67820d668996f39cfd88b09162279e2a8611477b57d9baf5addd4a6fb98329fb47354244537435d5045db6b4814f8d7fbecfb0dcc3c0f42757da3915899d21a3523f98fe5717d56cd1612eb5863d34a3168c8afe309590e183c6df554a3f7a83bae88a754dc4e69d4f8d603ee5f93796397bdba2b1635d63657705fba03b1d4b98396bb7c4ff0bae96e177cfebc96b92ac80b9fc3d7c8eef2308c0700f68884ce3d5ffd86371e2ec7996d56e5850cc9a777d5b0440827e4056d8c428a19ad00f8b3e539e4763fc1f33a020a62fc44a96872d985c4207f4ef58df3873b13aa779437b3e8d46c09bd2c697ed698c3a974faaf667769133f836c099ec45f474c3b570e53ec225f66e4a8744fcc03b260bf1f0f5ffcd269d3882da72bae506454fdc64a074288fc474b998b486a2f2459ad678462662ed8c9f4597c410b9908e12cb256f8b5d9efce133dde36b4616c544814367ab9c570a88b58ca2944b0c262cd9daaceaf9999b118f5ddfe1c32f4487a1a6d6b15800b756d5f96f165547a3a7836867293875663cf5a9f0573164536568c5e3949d6b37a1d5324470a7c72527ae3bfe6b5fdce7ab2757b3b0e5ff074f22ba3ab85729cf0f6bb11bc90863089b3e0048be63ca9f81dca59bc750be93f87f1f3fba07b11a1c980266a1cfd26437561e8ec3848d6f9a0c4509eb64ec986a7b562637523e23900562d9c6c4085fd24dd9563d000313ff47703cbfbaa7fed07f7eb5bca82ad4a6273a4d594af6b88240a4a4e54fda25b187dc2bb57040d769e908a18b8e95b601fee53c0de492fcdca4e0d85cbd5f6925a5ef79ee5988929b23f5664bf3397afa8b5705b6e9f67750ac1340ce25235a97864e3d33f672aa40b2eb121842d34490cf6c983f9b46494fcee6e91b04dc369c5b23b023a7a4d52356532933ed09798d94cfd315d0ce8606b7985ed1eba54094733650fa06d50bd83e3ac6fcabe56dc92efe27190b15699b0a1b44b0062c105c4ef9115abf019a9ed4a9ebfb6fc717f2e743ab97779bdbef80a88ae78f06ccb8b3897a269d993e06d3e6c87b00f10c5ebd051579facd64d54e41560e9ad4210019ac48482f24d4fa49cb345a7d927164561044556145780e6badd244041c16e3e9c76af3791f414f196e3cf13747cf051a5714af66aae840bd54373ec25f2198c896d2958a2f3a4c87ab484eede157aff63fcbcfe2de4c580c09342861f997b571d043c5e200026951a2031df4c25bed71f8f9124a4bb276b5535f4aa81757fe2983e34b21e0e12fb8150d4c08917b8c242f4469b435c79048c5de86d2e9eabd6b883b292c9613074a2f43fb38e63e062125ca9c062d01d5a2db25c0963706ed270edffa384f9d1b31d0cc9cb0bd72e655be1f76a262a92e073bc32460d6040dacd7aaecfbcaf134a5644d1852b6b891eb080a21fdb2b0ec42d2522847e89c33a670b5fb69020c979f8909ad3869d38cb1256550ab37c0030a9279a8251d145e19f1e79513f53de71dab67d9f51e38bef640793ac5ed46a75d9831b18e96d1cb5a1442798bff1563a6d39b996ce5ef26fba26d96adea017825ddd8584201e0af1032ff8667d1aecbd6c1c5dc43369fceffcf299ecc9a92431df69742e82a83d3b9adae695311a5ab7f66eedde05e1946e35581d7ee2ecd86008061caab71c7117bae0d9de256c0fb95af01c1c04dd47614613f252fa3f6cf2a9aed791e838db4445e69c11ea07dc4c0c4f36893dac7d649bf3e6b30819f6c022afbd178f749de0a05d1c72b77860f71307fb02dda63a8dd8fed8bbb81d1a8cd044628cd935b3bd84c0210f7099aff1709cefe1db5b1cb31dd89b100d2ad16a2d4390fc948b62285d270245245c694acf68de97f3d1ffba1b5895f20efe4ce9f9892e6e0b1d6ec48707706d403e42a8e160332b28ae58ed06f8e4d46f0d453b4fce2367d9df5f8c343ea8cbb72e45b336a3855eac37646cf549850cbefe01a69a905c9f86a2a79966ab2a2ae0de9aba14af7de8ab73f9e3ade5d15144b62530fb695a12d01e6e1edb5fb1c07187b453158df5fbbf321bd51476de06c3ebecd04c9d773cb5803564658272135221d48612da8e23b6a60ffad3d70a40cd1272318101f9b8ffbd8f16a3d0a604c21b147811f66f472e4836dfd4e7f85fce317ded55fb7429a1897cf2118a91a11ce991bc800ff7f1efb997c51a2e8084e08ef3dda3cda553514a2d8ca01c7c200adeddee76f70e9cd4c2f0bd0954912870b63ddd0701afebf834abcd34ca2852a22148a22dcb0e5ad9953c1e4529264c984f036fcd04e5b2b5ece9c0f866ae74f538863dcbeaa1a90412ab72e389495c47b75feedbd025d630f218038a6f9ac5609d6fdb5d1830ae8212910ba0f95888ff4a53743e30c76755c7289a27d57e91429af09369b5002971c38e2844b5ca9061890911319a121619ca231e040cdd5c20b0a858ecaa62aaa5b2703257ff6f3cbc7652b4f0860910cbf4e2aad5ba6d3c5b27ca699f6fdfff99942cc46ec14e89f09b7b1d7f2da12763a05ff0bfadc61ecbddead7de72177907e8eac20603dc8ce188db3b6b58a0e02acafdddacb73f6b8cbcdaff2dda57e300cfaec98087d0843a009e009d340f9e1071a3911b25c649a1d0ae50e403048d9232c283cb0c85e06fbcae18e79058e7908c53c1de663997e54840730cbde5c00dd19f06989477bb9fc6a2b4815ce73635673a089ae5cf6db8b1022e57ba6719a730ac345c2062a9c4ac8669648c863cccf0d61812116699c641f335d4725bf015aeb42f930ba9ed9e88d540628d1dd909d050c366ed8082bfa63c3fb5b6f9bf4d7d3619678a199b5a215642e94949e84d4c4bd6dd812a4f1a573167646d6eb483c5d78f8fa60bb1f28157c6d2fa82b01e07b208242082bf10a5ee91ab742861597e7574679eb48909b8ae377555aecdfa3d4d4f4579172eadb60fed16f97b56873ac5d1b4b6f80c7effee5c00279256a18fe55299268b929f4e79b0f70c7b3ee6475078781485957a1ebe034c582da5160e24d40e5daea1c901792f27de8148a127526eef5fea1926d926e441b111370a3b5e3f2215b5819a7cb419ab90f8bbf92625445d2b0e3f23f68e0a2f06a65f4e53fde1fe847304cb0c4fb43572e65fd2090f1b42395dffe8c9b1c139b92410ddff6fad9642809f2525c6a12a043722ebb442334daf49c83a1e95180fda8d29b16581c18902507938cafdb45b1af7cbfbdf58ebd036092a9a6dcb6f972cd4c47cac5ffe650d384e4ce314c17cd223f373ac2ff6bdeeb1e34819b61f2bbd8b422b7d9d798144fbd43ab1119ae2d700537f6a6fa44fb4b5d3a5006bff731f0a474b6ae49a8b21f3533448688ecce0262ceace545414e8af7c2d1b6cf8dd9834dfde463810263e32517365f69c7564d1358d00d12bd7eae9902aa43ce487c8bfac129e04fe252eca76d501d853be98951106b904dec7f29aef82397d514dbb2e092d9cb7416a2475af10d146720d3393389110d6c9ee8364e2c17a2536448d5a76ec26caed827bd14348293dbd7f1e7a31e27c0507420dfe1f65c7da47fd113a6c8925bddd191c1d017a3c4cedd277f435595e99dde2ebab1426bf336140e156c4bcd1f76bfc36d0d06b8ea3a0e1f31dea7331dcf30a0efad6d72223774e99ab2cc4c37096e33e70708985596cd6247dd8c0629604049ae056f691f4fae32bc04e9fcb414d257a04d02bd667cf6de2d48e0c22fa734097d3e5d48b0f3a884f9044339cd6787596a8bf211bac176d05f98d5d54ba9fafdac83b09219c6cf12331cb72da5016a4ee199646399252de031f47e6d770b9b51d3b4875c35dd97a51ee37a1ec0c9e0453843a3efbe9745ec9f914507e152f55efb9efceced592cb3bd9aa46b6e4e4279c252ee43aa94c15c6d5fb9e3e94b94c6c94f71c6e0e7e6f9055846c40bc271cf88e999c1ae186d8f5cd3392ae6a1a08285c41f808477cf378d64288573f976255ef7620767369d3264129cdcbed3aa45a36b99a1d4fdc5a0504fae9e2df72358bad20fc9ec34d7b85bb97e107f7bd462c07aa8f1f9e6946634d2e3d41241f0754141820f4454f14dbf7bb2df8b611842fa49f3ef745fffc41a7503b6c215f8178e620c8e94c8b0cac4203f1639294662679f0d9d83bd8d5f847250afbcd3be4aaaf02ed1abb7f43f276b136e27f9fcb59c2be97b1380672e94a6ab1ca72fbdba8716f91dd512abaa17dd805f5402086b4cfb155aaf3c60c93a8d85b898e3b6d88402d54c56a4af69d7066aa17e1bccf102d50d3201e3115d572e89aa33dbae817e36af8f5c1cd1605a25c3e711f831ab7e711d2196c2e4106fefad04aefd43f7dd86c133e7b54b087b168525e212d1bc738b0f045adb8f62d9d2d4f97b96fb5759d7ee3d8dacefbd437e677efea217f34aa13e8d6e6c05fb6f245bc9ee411da642e81e6db0c70e03b98a78dd71f06"}, @typed={0x8, 0x30, @fd=r1}, @typed={0xc, 0x25, @u64=0xfffffffffffff780}, @generic="175f2b6e7c4fbd42ec609b24b8d807c762fa76d2d6970376334411fc53d00788a1ffd2d6c401a693e1159fab0440167c782fa419d029ee94ff81a6e84677578cac3eb293ae8d45fba018da794ae6b174dc6db6b72f74f1cd02c260cc0620052c15283e1536c34a4ef1315c6d2869e341fa2e85abe8a774896573fd35341c59c00a", @generic="245f592e56ce3b1e053c43484a0f24d69ff1260cbc8ecaf73a1b4f78e57945c4f96da73be8d146908932f71f374348ca41f51ceb9a92c27fcc293b6ce45105dc4a6db9ecf1574a5f5159a427331607190ecd472dc95cbeb62cea85f327b9ed3936a526892e5800e9b77d21ffcc6f815cfa2989b04cbd29ac72956c7f7b5f070d7e0d9a2d7dbef22df71316fd608a95b71b9c4c5b053adc21e04fba0ebf1f41a3d9802623149c8b754a820e49acc10726eadd219ad9302a7aa3c06d0e3389b3d4be7067e5daff7de89096b3c3ae0bbf2b79cf562f472b2486", @generic="150770d4dd311f4dca08db9859142c2b00fa510de8c438b0650a70754fe3da9fc5c09afadf6ea63e26c26be5e7809ece233205379a4993f036808089dc9cdd4139896b96d8a65047d100839b5e9f1276d80721e7cd0426c16ca632c8e301f0dc0f00f31258f891c83c0acca798f2b4c3dea99e391dbfb565aeadbe6e4f01ad981546b731be011f9f6199f89dc4b427bbcfe3fbf86b12a3b865058208889a20cf7f20fa8b4994ab1ace5d04b45749a0e40339ea157dabfcf173084cb9c764dd8b05e78209c9612f852241c6999213250c58f2d1f9a5d25a"]}, @nested={0xfc, 0x6d, [@typed={0x8, 0x56, @uid=r6}, @generic="d208d4ce9d497d02f29714ab18ca23da793b7b37114290e350dc5fc316390f7e42aa743596800f19d7eb291cb4cc00cc27d1ea6acc927aaa1b798ffa5617f565b4cb095c3b3ea768542b5ed72b7a61e599e6288f8e904f5afad3c34d521da73f22c54d981d4993614fa17ea53f8c0145361e914f75b39d02a0f04ce432d63e869ffb006c1b2eb00701dbb54b75cd3b9c765d7c18e3bc7de9dc738b45f6e2256b8ed0af282c5cef64efd8e0049fa04929bff2d8b9dea1364b1392ba923f07c368c5cd3eb097b46120848180850cc8553fc760eb65e9e2ca52ab0b210805be1cef9c1797a95c4e", @typed={0x8, 0x51, @fd=r0}]}, @typed={0x8, 0x6b, @pid=r7}]}, 0x13b8}, {&(0x7f0000007e80)={0x358, 0x23, 0x0, 0x70bd28, 0x25dfdbfc, "", [@nested={0x10, 0x0, [@typed={0x4, 0x24}, @typed={0x8, 0x54, @uid=r8}]}, @generic="163d2550e4c2119bd986201112b57fbed6bc73e0b6229a625a8e7b1d53e59a6226242cba64cdaaa639dd0e2efb5642b48024125283caecaaf27138650da23f92dd99", @typed={0x8, 0x8, @u32=0x4}, @generic="7f804ebb443421f6f92cdf8ac28feb57dca7c130f6c4189a2584d4fe2f148296a23ffbd6c1bd5e07eda18009b976364364b6668e5c8615501496a038a2adb8b91e4c764dad9e37360af6461cc531ed3868fd2e0b4b1dd2035ee91863b8095514ae12d6e033a473fde73306e97054740f8a10b307f6a04d07e20467c13794c6362f91fb5e83f2c45dead5de16ff18563872c4a752f6f476939e88309a629d147c1ece135ac182376482f404253b3f168790797074b00d41d9bac0182fbc6590dbdcbfb3ff5c8c49c7c24fba0c50", @generic="d472d9d02691897c1b7240fc17e4808277a70505e0186623d42f2b408ce17e21049f5825046e6ade7d3946eec14d58a5fed08c6c59604f80", @nested={0x130, 0x60, [@generic="91cd3f408d8e2f2c41352ae4ddecf84e87148e4dc38774ef7bf8b46de0c69ad2c1297a359ea982e46ec1ab119f52ddecd89ff90c91807dac2ef3af9c43b7041d5dc66393f95a36f5a5358dd9b126eefd24d6b1a594352cf5729c941b727b9cae72550ab148548b6af0da81d8df4f7b68e10537e9ac5712cc589dcbf54b8097751a", @generic="69d55bdd7db16f6b85a5b28240ed5b29f9b89fcfa6cc065973b92321a49a0c66b70d0ff966c5ed5082f265c5c77c3df4c230481867903954317845953454dcde3fbcbe3d7c5a4b0e2ec3fbec522de127380dcf1f851ce6e205aff8178e246bc997d450fec5df86aba647919740dfadf4ba5f96d3835ff47f84f19d7f0fdf0d57ba129eedfc2429fe79a1ddc5672b2f6565b94993faecdc64c1ec1af4a5c9c80f72d6d9f8b968a2a7de192b"]}, @typed={0x14, 0x2c, @str='/dev/binder#\x00'}, @generic="de46ef5d499846f6fefc722feafefb393e54bf9072841dc6e1fd12359ae21cb316befc367993644078093ed416483c590d7a43ab32510e01a0343e383f6eab027e321acd8ae5fac08511bb176b992e36ac51a617f2869a8ccbb5196c9a90f0cf55444b44425c71a824bb7b182f54edc794a181406da07d646e7650fd048ae90613ce5e425c8367dcdf9dc0ca4f8ffc3759913eb2bd56bcd794b4cc10b5", @typed={0x8, 0x13, @u32=0x1000}]}, 0x358}], 0x6, &(0x7f0000008440)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x20, 0x8050}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:06 executing program 3: sysinfo(&(0x7f0000000000)=""/134) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) tgkill(r0, r1, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xc0, 0xfffffffffffffff7, {"0c49ea45b41ebf2c695f82595d08d5a2622bc63240c1851d2ab12edbbc68aa22ed596095101a626d397771d3879e2d4238165ebe1ae35c1995a1a89c78b0ae73069c15dd860e829a62ad901c291ce8eae208e6739060fa192f91ec8841444a2b6f21f6e79b8125457fda0d6d500f8f7b0a04d5359d3a355a8b8c6ed9fb2736a704c1a2b30384f05ae78b1be84ff5a67d8aa7d29d2a1d8a5cf42f16784248292bb012a4f96724da"}}, {0x0, "01a46651c709824e0417dd736b271fd15b3496dcec2e80d948b9083271d9644d1a72359b8f2bc90170193796b82c6558d2f41cb658693a23603f91b2dac999bd5985ada21df88993e48d5f136a9fff864c4d70224cc5d372c08fd58c3f48904e7b12b7ba0e320d602179989f05a59893667e4a8ba513f74f9eb351416b20e624d4995b0829dcf9a3b800e8d078c073bf823cda2521bd6fb10e7c83a5df4c4b09da342a0fff87ca8bf47f12c08963"}}, &(0x7f0000000280)=""/186, 0x170, 0xba}, 0x20) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0xbe, [], 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/190}, &(0x7f0000000040)=0x78) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$selinux_load(r1, &(0x7f0000000580)={0xf97cff8c, 0x8, 'SE Linux', "f7339871250c51c0e4096094804e2ab0faab685a446126531672338e14666b0604dae46a0b0ba29798ce10232861f0f37a12eadb35c716283e20d423ab7b925a0d149aad0d1ccf9f5b6b854ba1e44894dbe9436852ea79d4b90eeb21d984f1b36021b14327f64201b667aa1d79f320c77439a31d08761a4f16cc2e9aaa8cdc700feec5e735d523f4da33ecf3f1c030afbc28e88a1401d123f619b6a02a39d6b86c5ecc10f40f4da2e2152020490d925b18fb64a693137639333080b6cc1c3c"}, 0xcf) [ 284.929745] binder: 16191:16201 transaction failed 29189/-3, size 0-0 line 3254 [ 284.955840] binder: send failed reply for transaction 908, target dead [ 284.971355] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.972390] binder: BINDER_SET_CONTEXT_MGR already set 15:34:06 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r2 = getpid() ptrace$getregs(0xffffffffffffffff, r2, 0x8, &(0x7f0000000440)=""/222) r3 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r4, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$search(0xa, r1, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) sendto$inet(r6, &(0x7f0000000540)="c72ef62794a052a64b7ca5ad0eab52d2290d64141342b192b6aa61d5d71400a5c7379b54ff2fad90bd18012c1ccc97c73863cb5fd082113a4c5d7a00adc4527da78f23b11bbee165575df88aaaf1025b862928c0c636da0de3867c034b5d9c8fce34691287f5512e", 0x68, 0x40000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x4a1a}, 0x10) 15:34:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00F\x0f\xbeBG\xa4\xb8Jc\x11@(=D\x8a \xaf\x14 \x18\xb8\xeaPuj\x1bo\x84\xb6\xc7\tbZ\xf7\xefH\x8dz,\xc9\xe4)\x90BY\x916q\xf3\x8a\x9a\xd5E\xb4(I7&\xdaC\x0f{aS\xfc\xae\xe2#\xbcU\xc3Q9\x80\x90\xc2\xab8?9`\x15\xea\xa6Ba\xb7\t\tv\x8e\xc5\x17\v&\xe8kF>\xe3\x96\xc2\xb2\x97Yk\x01^\xb3$\x84K\xdctd\xba\xf4\xe96d+\x95\xa6\xceq\b\x1a\xc2\xb1\f\x97^\xe8^\xbdZ\x05\xd6p\xd9\x9a\x90\fDr\x89\x88,\xcd:Y\xac') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/pid\x00') prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="29c096783a9b89fab7499f247610789b435cfb2fe21e4d3202f9a107275793a04d79f92b5e1690706b8279e443e6f3dc9b83d461b14ccc29629d68dc08da33e661727a70fd2ebf08d04317bd75353e289905dbf4e365585d2744deda73aa05a94659ff1c6d5ba251f8028b3cda24a63a833a9d5a3814d0592427ae29bb50ddd9", 0x80) 15:34:06 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$getflags(r1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x7fd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 285.017510] binder: 16220:16222 ioctl 40046207 0 returned -16 [ 285.020098] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.029325] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.035388] binder_alloc: 16191: binder_alloc_buf, no vma [ 285.042364] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.052679] binder: BINDER_SET_CONTEXT_MGR already set [ 285.077096] binder: 16220:16230 transaction failed 29189/-3, size 24-8 line 3254 [ 285.078131] binder: 16227:16232 ioctl 40046207 0 returned -16 [ 285.087186] binder: 16220:16222 got transaction to invalid handle [ 285.092751] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.101519] binder: 16220:16222 transaction failed 29201/-22, size 0-0 line 3117 [ 285.112794] binder_alloc: 16236: binder_alloc_buf, no vma [ 285.120863] binder: undelivered TRANSACTION_COMPLETE 15:34:07 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r2 = getpid() ptrace$getregs(0xffffffffffffffff, r2, 0x8, &(0x7f0000000440)=""/222) r3 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r4, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$search(0xa, r1, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) 15:34:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:07 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000200)=0x0) r1 = getpgid(r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000400)={{0x2, 0x4e21, @multicast2}, {0x306}, 0x2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 'lapb0\x00'}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xeb) ioctl$TCSBRK(r2, 0x5409, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/pid^for_ch\\\x1fdr\xa1^w\xadznH') [ 285.124725] binder: 16227:16243 transaction failed 29189/-3, size 0-0 line 3254 [ 285.129512] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.164390] binder_alloc: binder_alloc_mmap_handler: 16220 20001000-20004000 already mapped failed -16 [ 285.176333] binder_alloc: 16227: binder_alloc_buf, no vma [ 285.183893] binder: 16227:16232 transaction failed 29189/-3, size 0-0 line 3254 [ 285.198229] binder: BINDER_SET_CONTEXT_MGR already set [ 285.203727] binder: 16220:16222 ioctl 40046207 0 returned -16 [ 285.204008] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.218190] binder_alloc: 16254: binder_alloc_buf, no vma 15:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000057c0)) r3 = geteuid() r4 = getpid() epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000005980)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) readv(r1, &(0x7f00000044c0)=[{&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/82, 0x52}, {&(0x7f00000056c0)=""/107, 0x6b}, {&(0x7f0000005740)=""/122, 0x7a}], 0x4) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000005840)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000005940)={&(0x7f0000005800)={0x10, 0x0, 0x0, 0x8000a880}, 0xc, &(0x7f0000005900)={&(0x7f0000005880)={0x48, r6, 0x116, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast2}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x10) pwrite64(r1, &(0x7f0000003480)="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", 0x1000, 0x38) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000004500)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001d40)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000003240)={0x0, 0x0}) syz_genetlink_get_family_id$net_dm(&(0x7f0000004480)='NET_DM\x00') getresuid(&(0x7f0000003280)=0x0, &(0x7f00000032c0), &(0x7f0000003300)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004540)={{{@in=@dev, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003340)={0x0, 0x0, 0x0}, &(0x7f0000003380)=0xc) sendmsg$netlink(r1, &(0x7f0000003440)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000440)={0x129c, 0x13, 0x500, 0x9, 0x25dfdbfd, "", [@typed={0x14, 0x67, @ipv6=@local}, @typed={0x8, 0x54, @fd=r0}, @nested={0x1260, 0x3e, [@generic="98000a3ae36448365bf050a78e1aa1d544022b108b6eccad559a1cbf6b0bb47cd84370b96766dc99b4535baa3017da910a9d553ec65d20c1c8077f465df9a289aee6a3f3c5b65701564825350bf235b8878f4d50311c6fb04b342740", @typed={0x8, 0x15, @pid=r2}, @generic="93f37c80f9266858000a9614b4a7b5fd86b14b45de52d921721ef88f313761b9b526778747dab824a083b59e232f215eb16fc5204916262d7107b48d0fd838d6184a339a87a0e992ec9a63d4b35c85159bf6f1d8a576d3e3e8cd5af7cd8ce7f49bc19789f55616336fe2aa94eb32699c918b7da51cb006727093f644f9e99b1ca8acc1531aa2901f073dcae621ef75589bc2d771079909f11b4807a51bfdf040034e71c9336bef6d3cee33b6a245595d77d81e2f0f3b9627395cba5758bff1c07f7e72721d01fb6fbd6fb20da0c7e0709dace49a883e35c663d3aee0a6d16714c6ab245284594efd3726dcaa18c87cb34a725e3cbc6273b75b", @typed={0x8, 0x4c, @ipv4=@loopback}, @generic="694ddf9a3435a1cd72baf2a40e86d78e0dc115661dda3570202c009e6af9df20c89641735d97cd483f2382933a182ae7698cfb4c97c5b7558ad93fd7a48f8c9482b94335e82104a3dc06d280a526a3a97666d0c8c1bd58afe64879075b27a194ce5f5df7ea9e7eeee642871ed4974ff6532227287f304c77015389e69f1dd9bd1714ac05840a3077296951e8c4e9d5969a97dbe5289ee40016a44775da0d451b0e893393132dc4144f24f2545069a2bfa96c20095556c040f28bdb00e8cabf36fae19e2afe43e36911abe3c6ec22f65bda129e51ca5d72cf06d686b5231539", @typed={0x8, 0x29, @uid=r3}, @generic="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", @typed={0x8, 0x55, @fd=r0}, @typed={0x8, 0x4e, @fd=r0}]}, @nested={0x8, 0x7d, [@typed={0x4, 0x7e}]}, @typed={0x8, 0x7a, @fd=r0}]}, 0x129c}, {&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, {&(0x7f0000001700)={0x1e0, 0x18, 0x700, 0x4, 0x25dfdbfd, "", [@nested={0x90, 0x3c, [@generic="06e0818215983a13f520b09d91ab4cb5ebe40eec742009661584a53ad6022bf8b8b3dd4e78d70c3793b56c672c0d37fc96dd790b36bddae9cd4d37ad393c9834d9165fc2dd526544a60f984237ff00777f1b092ff07a48e5fff30b0e3ee182c40d2369f90b6323b22b2af6de150a308aaf5d5dd5fa4132cd56871162432d0cfe1ffa64b781306d0127911846"]}, @nested={0xc0, 0x20, [@generic="154238742c5b9ed353e24998b5efea0ca27fc3fc4d882d307aff1e6e926c7c6726b8cb4cde0912f071e18f13800c5cde621336b7076e3bd65ff5998c80a8d0af365b3e743729bf8ea7626d0bdf82db82c48bd09f4eaa4b478ad7ae8525a24d4ae8b374b18da9d600d080103d540078e4f4cfea8e94240114984c31c75f209d3a695b1e89b6d6d0b9cec8c499524a4f97fce8f3aa6652913f7ac6311c22be40db481ca962cf", @typed={0x14, 0x91, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @typed={0x10, 0x49, @str='{!mime_type\x00'}, @generic="2144426f1bddb498acdc4c4706df8d2808c001d40b63b82e8130cac4c2394f2159dcf38470a9ac48af0a568c50ad59d85af5787ca0a86ed5b773f30a04a3477f887ed5cdc8f6324c583e9b811a712efa0900f345c045ff1d25f2569f7ad324f965aebfbd9d22354725b8567b5aa4"]}, 0x1e0}, {&(0x7f00000059c0)=ANY=[@ANYBLOB="14040000330000032cbd7000fcdbdf2508006f00", @ANYRES32=r4, @ANYBLOB="2c0014005cf8fb5f2f4f7557b07a3a1c9353fc29a9b360ef4cdf5f1df83702346550e342cef659ae2eab0d2a872897ed3892857b8b24c9ffd9b0ac1ac04794728deb580e3cb6ec012000509b42b9845bc1cf9d1bed65429a1b94459dab9919fdf64c6a558ca5e37002b36e0c9a600457df4e169975086afd18fc70738bba8db60ae33387feaef4b1652592d1749385d099e91e9d72e61612e228024d8cf836c20195700b69c677f987382b94b050a2963f404ff248ddb0dd16510664cdb92154a365b427e0e894a08f1ec1cba6079d5cefbba741e52d55370ca1e5deb73badffcb51af9d5f45abe30d3b428b735fbebbad420399aa6296d80a3e090db9d411ce5de1938a702fb2679e8b4bb6a514c69d3b23ab6004f1d526759eedc45ba50e14e82c65065ac6f9fcd8f754b5fce29faccbe5372046f92d19ce9f00a931bc5814480d5681bb429cd1db3587694d3ebcc77d6c7260f66bf7f7276cfb874d205a21e76b8561fb972eeb14e02f126f299567edff1a6483667bc74f18bf97820fc0cda84ac559ca86e791cf7490c483ef1055fb856370bb00b3c8b692253b522d756eb48d7eadbf81036d44bda8d5eb5aae72bd5270a505228ff92c68bbb35ac4c1701ab70b16ffff6f2ef9e83e63ce9d536f0ab33195ed79ea13394746af0c32a72e9a4be9d19cb7951fbaab8031df4c248f4b1f79b7d9dd163b36d034a4bdd9d23459392435bad26fecc9ca57f64616839aea06cad326f693ed6f4cef022a9e67c6a04010a2d8380173df08008800", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="bedb78f9428444d383a9c2c4f3e397951c5c7a552ffe994d793bc1dfee91fd2489452d66d2ad10a338e10925c791a6254ca9711c887275c75061fb2247cd85e194c42c0e094eadd31f44be6405d2202f217db632fea05489ce9de1e77a8369b69cbb580fce6a0386215ca4d64d46ad1bfa8a998fbab7839ddee50d2cc5e3dcd0cb93116db094d46ec345fe4a9e2c969da93c4ef6bd38fa58534185f215337e8d370500000000000000fe5227b2395d4b767cd08682ed8559f1d1c1e4b0c95ab4bc7f0a735db61525209d8b0a9fbd27355276189ae51ea46fc9d28a"], 0x414}, {&(0x7f0000001d80)={0x1438, 0x28, 0x410, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x112c, 0x39, [@generic="e0f4969f31ff4499d78cab4c65f07156b1a1e5e439", @typed={0x8, 0x33, @fd=r0}, @typed={0x8, 0x47, @pid=r7}, @typed={0x8, 0x53, @ipv4=@broadcast}, @generic="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", @generic="ab2e99d41a9b0fb59a3102f87820c70b7bec1ea6dddc7269e7620e153f670aa5d4b3d4507f4559e5fd37f4b3e54256f3dcaa3be691eec7e38812ef77e3482aaa6014bb7c17ca03ebb8307434e0cea8bcc2d818306c9c96f1af5a289e03659c3857f30391826392e96d81971d762c7b1486691f58b2eec04820906db50a01746709789c202b815509dc81189097ccf5cc5b3b8d4ad1135215668cc0e97654331a2223ca5a056a1040f5e1c7d2368722a275268c04c75e138d95a2e90f6ce6015b953bd1481203ad064a91432b949ed9ccceaadd02c227cb340edd41588ec892352e50d4b0d691780f0929b8c79a143d8a61c22725b979d4edf157f02a1049876d23ee26e4e32ae6a86c029602386fe97f99c704f7808224f503f223a9d29f1745a490cc123c7c0e72ad813a9ac18bcdfb172b657635647f0a547abf3bc77ec41096b94f4e8cf7a9b3560d183200f4478e99ba5cbc2169207c8f1e31aab0fa634f31bce85f5a270adb20997f09045c74e98b3c45e9160f1f7868407215929960d977ebcb0b0792de96c0665afe9148a22b27ab1137a205c1f394854a7c31465b5edd719094d3954c683444b78def41d3bbed1f637a175970355fc2562539287ef83f5ff3e32003b02012ee7d279584b62fd94ffefe46c31c695ea44c8f7bf6fae614766f8f96fc145db27310c309ff28f10ca6bea9a4bb0b03a7ddc5f27101c88328d48d61af02e2100453b332f38ad124c9f5cc9d15e8025b6325216d8ca3427115cf044a2df064f22d0dd3e21dc40f031483472e69cecf052cd5c7c509ae0ba8a8b97b27ae8e87cbc56ce3cef4a5fb43f2fe142c4b34a871779c4ca06035a0f3bd328e7657301ebaad9216aacb7705de3b4f62c63ccd90f23e2eaebf710f01489d608cc52f6ff51caf5df35857e88d3c83b3d25df9cf7567a9afdd3d47bbf20340e2282902a6f07a2308b92a4ada021d36f5a1fd306987fbc35de2bbf38c7a2baef1b1e5dda943ddb7f6e0cc51b43d04615eb7a6d2e14cd1b180a387280aebbfa7756f297f9bccf9eb7735e35c70c25522a2c040a2e8117be9725c87183c194b14d700c414b5fb00e56eb0fc7a94a43ea9b4d955bfc38f78b3ee622018f5e567609a3edea0c3ee4ceda751b60c6670111bf2d2c772f82472d06f6661abb0fa3e54e8341ebfe1ded82ee59c62d946396d6bcfdf34a1837b7922b597f4187b131e3219e3f75631dd14740d9f85104ab53abac1290ef87b2622acd13be94ae2bdaa6f07629f424a403e7478c96f4a3f0a197402d6c22aae7a49976f98bad71bf824f6d3015f54a382cc74c1e1de328e4a8bbd9c9e499322227f9855b36924ae2934da1e54fc243b44a7944267e71767750567f4dbc8f5fd21ab1d290b7266b28eb4f02d6abf38b1780c370b7e34cfca35136bb9ac122f418e607f35f36629b7ce9fc6b33694d6ef5146bfa1ff4cc8ebf8066b7851171d84eb5ac33c94e924f88ce39d9c98fa586fe4a2663015f8a4cf24beb65e9984a2bd2c4df13937cdac064c84888a8269c38756d7e6e0326f60d3a106e41392d9d9cbe585b5f4d70e64a2c96241f8308f3683937fccd6e88b7ee9a0dc14feb6f8e0598d413a957b2c2853bbca0abf0c57ff5c6e532f7fb358ad5ae6d12eb635cb6e12506c133b3ed21e56e7b2d3ef298450b27940b67b3d8c60d25feb230aff4c93fc15f968c1624214d28207be4b13f67ab2dcd011afff7ee12a8c64833de590cab52d82d64301d8f619b01266f3ba0a38ea1ad1081082635bf4ef1167c28a648eae1821bb1549c5f0c1ce76f693e3aeb820bbb169385f3e402cd5059567b166fd5dea14a3a25cf2d94216a7f81c5e2fc16061a250a409e69e62fdee4255426adba54195220ab73e02908ecb332688191f6fb717c4261d933d6f5b6f2649cb2552d502404943674bab7a1eb6dee5d7a68fd4cccaf466f052a208e173161b4eef52c6fb476e2ff601806351007752dd57bbcea67ae88c4b88929865d7bddc877e5024cf3fc396e15f08a8983aba62d4f5ad4cea7e51b09e181958c35382b323cb07cb2b9cf54d70550873f191050702567e711189070847728cc90d3cc9e75a0b72a0d489a14d994a619ed4fc6ce6dc28db0af3a1fb9fb24c18003224143cb6e4b8b334b140a0cb597e5419e5e56921df08107a8ce39df47b543a4d8b1394dd76d1db9f54071ca283ec6a60af24e964d5a142047f560a8974594f487e9bd3e5532ce30c7fcc5c176f982c16ee1cac147b1b53b179a1a03f870938a3f985e039b75aaed0364cb88d474a0c0f22225cdda114a31bc1e249903036a481892e2ffdf42b7a2f9007884f154a2fec7f10af15a75f3668627784289bd0a422075f11d67f15e81b97b42059f88edf1ded613f464b05a6fbb61ff6054232aaaf7d4d4d3badc092d29f7229be02bae3ba054bb2425a4e9b4bf772ded9ee3fa8500590bc00e2b00cb24c1f82346fc6489317fcd53f5a68e0f4030955a647a4487002b2a1b24b3a2c7707dd3972d1a3ffb306133ec1069632f3ea2d7e2d2b2cde403df0e4b6b5dc1d09e34e45e0084ed6420bd7268b5828aeacb103069b84ad79cee4ec097a2e8bcfc4dac258e3808d0a61ae7255dd1d3e47b515904fbf7264873e7eb1a610a32934756d8fea662f49d7af9a8c688ff1d81660396facf6cd732012a48ad3c3daffffb7bf633f3c69724d4b79a68d5fbf558c1d7f34106eee77481e2ed4531af04ca1cc8b6c2fc22b2c5e70552ee82af6eecc00dfbdd1b39768ea4e43362d64982007e745f98741b1bd51608d6324f3ca828d5dc605637b610a9c56d1219aa294214ae3b92769df595291a9c8576d13bcb156869bd96b0ac6082b1f50f483538f7e371fb899ebb4aeef3d822b6586975f9824aac9b87b518b29675335b93709c9d2c2cee9379dd4359f1d704544f23b3426eea711eb95b86cd25b130bf33231fdf9fc384dff9c50fd2382753acac93156397f71c07a75a5fb81bf2e76eb283a96d072f9f5b55ba83ec77e6d23e8d28519b3a3c0580a8366ba699663c22e6ade60cd776b67561230e338d4cf368eeea9651d037e0ec9edb396b8bbcce64d8be08ba3610ce9dc4b80071b8e363adae9ce3644fd1a6d2cabb7cb64d057f53567a084a4be024c974a18fea4770c71a014ce793c3cc8c98e89b878553eda8fbd61191f45b11d644e5579c691f71b6780364102cb8aac5a3d4f05affe749909d92eec28a4ccee3abb326399a5251881903ace593579ed3fae9f2ee7599ebbd078a03458f26ac41df3767e0c6ee46c9fe7fb9258651eba41c7108c13def022000144d5ec41d83ac79420057eb565730fe1328d9adeed0041a3a5e4f545948527dc7c146b82b1874ef9ec4648fb34c641b5ac2fd0c8c45c2673e387d51d07bb5d089e886237bd860f9eeb8cb491aca23be8bac2070f7a296e6ef296dd5c06b8bb40081d3534e1de4167ac6d40a01a6a3e3c2aa91ed358769c389cbee48f5a0de7e1eb8cf86aba6ba95792da00a2136ae45dc559789b05f872f98e188c1eb61c964564eecd78f3fb2c08caf32ac6a1b7811c1c216fac62305175bd44f10faf25f0ba9b278da39715198a007b320e6fcac7f20324dbf4a4acac0c6ecacb83f4694faef4d3ee601dbee7c7ef50eb38ba2b1ef56c6bb6e54f30ca816fd889a9c5b58e398a90b3a348d7e1aba76adea488b87a6d15008643c77413329fe70daad5b6689335c20bd2fda59a2d5854d332c8bfeaae74dcac902c7a3fca4b7870af4e697f79bf75019397ad94c4471927f28d4dff5044d3ae50dfce72a456585e10a4b7966d1ab7bb0347c8280bbeefba60d2418384715f56b5a6a258b60ca8ef00ce91556676c17a91cc4d2cf7e1db8562fc7df6ba6705409c2b12762cbd4d449605d5994e3c2527f0066c4e8429715160edecaa85efc90bd1f702c419bc60abe69287040dfda8c4d0b84c0d9df5c45f8046e900da89d16b8bbd0441c541cbdf026564ff2f9288c999f7f144f7256d6e43906509637d6d102a29e74d707f67a6291349e8800f8bb06703b47f1ffb356980c42d36c47a8c5b3d50a31531b15668533d9291a85a3da55231022f4696388d33c25646a2618ef885bf3d54395b3fad71ed99388be3ccce17544a6db64858e7541ced517b0b18da1f4dd975a4505bf817158d4e44253014878ba66293aad50dc384b498c9fab495a904896bceefb3354ee5fa1e0099dde1073cf49c45fd55a323c610470196478a3fedf2c1107fb7f88d1d59869543c93cfd233ab161b972dff03940be53104334a11975da411a07ce5819a92db3a224feedb038697186fc01c650d0c42fb71c7b1c475485a95bd953b98e2dcaec66813b26f6675cd49f426df26c4ac2c4880a24ce9269ead20fb18c245f27ab6d524be6042655f01864aa2d47e1946604a17e38139854293c64ec4518a5b5e7d1eb0730f352692d15ace365d81d058495cd35324affdd0f9e1061bc819c12053b7650ee1544a705438a4777679d0b8fa5f699b21e481eccdd8ed201ad09aa26dc0cbebb22f72f851c0f2e0080cf8ffa6345ac73dcfb9ed8017bb77fe27aec47ce8b0687934f9eb6c322c3e5fe0ed0a892dc466d0e827bbfe8bd6e05f18d4689077797da22ec81b70929a6aa85da1da9ca68f1191bcc96df07b9178284a8cfaed80acc477c6942819931d567a0999c2e9e12f8d9a49009ef761a76fccf57a5373bf032ad476a744c6784e03c4f3784e832f1a71d66396c941922e4d873c70698ffeab0fb2a3be1ed134461127a110aac9a375e1ddd06eb6eac790f91c0cfe5a264ac654ff05fa6f11e01c36c8b02a58f71a35792eef7942e6fe18be6ca3d1d34161e97cf2a3b43d4340b7ea54ce7a67582a8867b18fc911885ab31718ab1868b9e31a701b5d2c73ec712f752c6da406fa16968fc0cc50d60377278823e13613855a1eaffa5df2be56f3a08eb4238c08fa95c838b47d1a3d71202cf34d397475b8c5fab5dc158f0310840a4c221dfdfc2941f52b728fb6126076421bebf122961cffb7d79a4c12e2989ddc6db07384198a98da0754b05d510714d66234d9ab79dc77cf40016992c4eedccbd99c3df9fa7cd837b719b3a2c84cc1e7d6d59a9bd192bfb2da440a1eacd4d8c01d512b48659a9431f5115a01522081a13b92b233ebe4ebf354ccd16705df5a87ad6e1909415598028829745e44f4df8557dfbb9cd91f6f3de7d88555369ceb14e7e5315ffe2bd21426561932516e4e597a305739314c7cd8f8aa16decaa7c2fd978521e178a2d1d69ba9a0afc04a2b35710f77bc2115aa8995b4e76f3230d1ad7509f4397f7058ad434fe82eec9f6d0f68a87543efb05fa4b98d0eed6e762597937d2df26ec512611c9a5e024cdbfda4251cccc06bbcf53db75af57817d353665a28e4f0d8da77c6f5a75439a30a4415ca955f3800f24af1433c4eabb9933343365311d434a790de902829159140c5bd1af270969a61e655d9d5d1df135ad72c80247775388821d144871d780f286640f857ee2635e64768a9bbb5721ae54dd82b352c851ddd14799dadcd606e7776ba5492e86c8cf068b2e6fec0b924bd42d34a5b47fa1ff829d1045b7f5ea6d8bb38ac24559adffcc6d1c6ca04281395b45f711b50f202d4b25ea6c918ddb98238bc0994838c17b37926c591a40fc1b056620e3129d0a33b4b23b8753e3a563049901a28dbc78ae159c59fe70425723d4747543722ecac0a48c76639562065b9393ca04e8586bc51df927c69c6d1eece0b72d082c0c3ba7"]}, @typed={0xc, 0x24, @u64=0x9}, @typed={0x8, 0x40, @fd=r0}, @nested={0x218, 0x34, [@generic="a73b5c0568c1cd9b036906fc7978cfa9246bab5b73c26154b01ef28e06ccfdc5711d8699bf43f89acf31871571d92384ff97b90aa0000acf4d3f16bec07b0cec04ebd6a0906892fbbb01cf4e0a651959c548af730825f3b334056829cd2e955281fcc9a9188f5e6a519b8e4e", @generic="fab04251e7a1c237f98c899c77ccb25742ecbf320cb6658a546efe2335f3ce6fed8171b88302ead1419d62a22adc4d1bfc5f14039ffe9049135ae31b9ce02f01269330c4dda74c7314531754b78d9e35d05702bb9296583c086c187bb70542918e341718d0820c828b6c0b1d2300e398e286b3c1d19871c1a037c82483ee1e964fbe939e5e2ee0c5d3c8fd57e74ce68ded03c67a9728691eda6138b4f320128825b7400b4adb4f2427153a3be52365caf5baee108c8040823c9702eabf94c29b51a1e6ccdd1a3d782eff71bfd7", @typed={0x8, 0x86, @str='\x00'}, @generic="3fcf9fbc0138b0c05c", @generic="2f2033ed9255df2643c8cb41cc1d314f84e42c7292734dfab01e5ae69b4e3dd13254e305a2fb1aeb0ff9b3286793499c0812077fda2b16cdcd887a892e65b968d62151eb86d1a0b6875b4e8f89e9613de6e69029f2ac54a62acf010e314a64764800989b3ddfb29f37d9e7b9c714d8279f155dad658c6ba3edc4a3fd14cfb381007dcd8bd7338eb779a1a8a5ac1b2f0e4c065455e47c1a2a4ee0cd02cdb47727c11adbc28e21d3498b46e7820392e55ed46b8b145ffbfb2a470137bcef4b3e9350a5aae2bde0b7"]}, @typed={0xc, 0x1a, @u64=0x2}, @nested={0xc4, 0x38, [@typed={0xc, 0x83, @u64}, @typed={0xc, 0x43, @u64=0x8}, @generic="ad25af3c5377ccd8ab8c6a3b47f75d3d18822ac59f30351cac6662fe0491ef233e042e72e26d7772333e9039be1836b71a2a93e80c02ba6954dfc57f1a82c9035329716396dc1ed1c7fae7171bb9a4290bf2c061746aa5705c509f2b65ff37cf56b47c9c95424f105d5788fed6a3f4791a9e8fb4b612d74e0b330bda62e189c0897cff0e64b03c8d295fbdcf57621fd159639e", @typed={0x8, 0x49, @pid=r8}, @typed={0xc, 0x7d, @u64=0x7}]}]}, 0x1438}], 0x5, &(0x7f00000033c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x78, 0x4040}, 0x8000) [ 285.218204] binder: 16220:16260 got transaction to invalid handle [ 285.226932] binder: 16220:16230 transaction failed 29189/-3, size 24-8 line 3254 [ 285.232748] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.256964] binder: 16220:16260 transaction failed 29201/-22, size 0-0 line 3117 15:34:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 15:34:07 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x88013, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0x68, 0x0, &(0x7f00000003c0)=[@enter_looper, @register_looper, @free_buffer={0x40086303, r2}, @decrefs, @transaction_sg={0x40486311, {{0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000340), &(0x7f0000000380)=[0x28, 0x48, 0x28, 0x40, 0x28]}, 0x9f}}], 0x1000, 0x0, &(0x7f0000000440)="a54e5b155f7646a008fd5ca3b28ad498dcba498d73939cd0de653df1de827c37215c5470c7e746aefab323252c33997bf75d929a901cd1d957a8175fbfd76e94960559e0c27a2b6337066a748cc613a046753feeb6cff941e1b90d65c08c2d5f411169870a0a728c21bc92c3a0e1136d2e5b4b6d4005a49bb0ed71e277fc2a6b21623ab48e672d8586847a95438bff9b25c079819a34d4b29d45c15bd7c8756c99bae3223c92b3522eb161b1c629d7eaf2549dd2d5bde92570b3c12d3818fdb14b0a759f8d64247a599ebb86c8205ac60330908b4e7b03e2fa09c53e2ee287836034044c71d659445e41ca2a8f8ead516d030f1d14229c814154f0d60820d9ce9ef1a0fcb4761b37a4338d6339e4fa05c1d4cb7a288622cf2bd4bb1f6c9544b202570f3d226c5b2ace571075375a20cc661176bb01041a596956140b4327e5411636a6223f9b8039f00e77a6f2d3a9612ec32fe8156368c5671af772dfc540e06ba73911ade003d0a3f461a7a544f7ff0b7a7e9f87d8cacde6597fe13b21f2eb2f0d19458dccae894e08eb7ad6af48f194e632cda91584b58ca755bf88df86f39b44678c351577310dd2a58e0783a7c61044859593c4b794dbe92dbaf7a82715fb3fe89fc14df687cc38e70661eeec6c2e757080724ea55c492ec7cb74c953cd82c4a6e559ff21d7fcfb08f65d9f0293c22919eadb0947b1457bc605b90f1b23746737879d557b5fa8fbee4f2d4fae81fc7182402dd4da258d4e5300976f41bc3cc1de0266afc292ca8f8c0a8e0178c17bb7e44c83f57925e2f80d269a092615233c635766cd8d3afe2a2af0849d1ca71f36823e3df524948c95d571a2dd3c4fb08ad98f5e5b0371c2c4bdaafdb35d1d9bb534ada449b0e235e0e53f2a227c185b5fea4687ce87c580097eac14d59dea49c2a7a9615ea506316667aa514543dff7eec6f448d479bbbcf61be2869b7fcd68db331d5b2e5659eb1b38661b35e2e9d87acb8f9f0651d8506eaccd9c0b15567147ac28a466e8a6743d1b5f028b590dcf682afee7a0d42ce1c4c40b567365788dfb4641192db1be1dbd57e0bfd20c9c4da54b557c8e5b7563a72d8d2f91fa0d78123a0d44877bec126a2927682b01f98c721010a5524f33c448d41b21f13644eccc4c2d7d6992bd9c8fcdbbec1585d8f680045622dd3ad767ad229cb5475a9418335a7879034ecf8eef0032115d6bba98c03237b5582dc8c71af90e559ce2fe237c050115802b2f457de32a3f41665f75abf3571900747e3a46561d994befe329d11beb4ba127f01b9514c2d3fa17b321efe5e645e1989614a90d5a7dfba671a327d6db58b09ae0d6b369fba7c77ceb74a2ece0fd5ffefa4d4cc2deaa1334ee63571953686ad33732d04fe8ef8ff645638a8c39f452ef37af5fb7f10e4b7cedf30136d3146b5660d337834deadd6601bcf5877b56915fbf91c34c5e6366991de0d23adf1a3422375e9161253557a6f64d60b1fc5a3a0e4725fa718a1554982f6ffdf2825f4aaf98628b1349e574bfb90992b2a62c9f418eb8a5862b5befa84702106adf5f6a8e7f532eb2dcacd06bcffc4fbbf8cef563f7ca7d3e2e82bfdf682b1a00600b907ebb171b1a907e97581ebf027e6bb1d713f5bed287712cb703e1175af7764c92255777486df026c060131f8d2982b9d8db261a4586985fefa137eaa32e22dc6975252bea1aaf37ba4a57fc7cb634375c225ca5935d66af05e417a0a850912aae4234db338ced01272b904d4d9da021ef2f5440b17c64be8c793f070b33ed989a58209d17090936512b74dcbaf67ea88d261257ee1909e86aaacfdcf012e3a9acea4adaca296793454f7197ac62dae56b0c73a60b5ffe304bad183df988566242e18385405973166f6267989afbd9233377905d27976abc4bed4cb44fd4ccd4de5e5e4c0f8546fd678bf6ed4e65e76ebbe0f22680bbe26da6dee3e1365cff7f49e17662f3a4a75984b96cda3b2aa6b35ac44204ec373c82b4db45eb0c2ffcd54394af858c8e7487b290f9611cb01a53866a8d059ae42237805579477a06a38608a86a151b7897f6cba939f71ddae37b0a323d3f25f9704c1ab96dd3017ecbb5638b68da88be9ca815645ac293ff69919f2c7c7a31502638f00a55626939e94249e04be954734f5ed6409a2fedf178cf31316dcaab718704ddc2ce9bb2964e2f426efcc6c0eac0d065551e72c8d11043a8a738969da8d47bc833b3c8b0ffca45b8a23f44f6f44e8d279010a2c9337da9517991e23d3267bf925d5668cf6e0f4479934ac7e1748147234ca9413cca2a5d339df021986ee8ac96846cc9272d801b90f23e8388a5f139149d2b439333b73a8e900770d37eb9fbf2b32869ccbe8af162f326ce18351db0416de5d89eb25c9b16d24d550bb7e9632ffa9209ccfc1084e206bebbb87691f3a24f51c90272d499e90072e75449fb56d534d554f87ee574f9c549595ab57707a438786f516d30a2c8584a3b62faea54abf77cb4ba094cfcb7f7a3c4e72176e699042ae38bebf3c21d70fa9070edd23eff0d2a3d5e0fcee244565d58e45aa8424e34bf4b51e7cdaa529f1390232699c5b57df5c7c25afbbe85dd826b238aaafba7588100665121ba740ce3f0c05ab3da0767981cd6b6cc18027217a8ec4668b8ea0739105e4d169d6b8cea39e0eb5debf1f3289a542074d7487d77ba4b00022efc071c182b0212ec2804984ae287d63de62cda25cce995f91c111647c94794295d594cc265a6e2bd68f3504e6583f2689d8e2234ac6a863afa751e5cdb51b551ef26e7e06fb46acb64d52d3f779ae438d18630882502f21d7b5f62668bfba37f0f420e107f9e3140383bca369097372be3ea24859f4e42743777ddd6c9d6819ce4a5599864d55dd36744fc3da90a58f63c124ba4e92f72fb6a8886150907e49ee839044818428ad8148296825155a7c2fcbc07c1ca1c9c3135ba7a9c4ec0cfaf2a103f88c72ceb9beb0257b3bb49c29a05fcbaea3a4f936a9ac0f6386310b9891aa196850e4e86fd4a6f3cc219744b467bb9a2eba6ac7d590b6852ab23a1bcc2401065f16b65631d7e801414631f7bca62afd0cd18f647cb8f67488f3f3115fdcdf7cfa3584a92e772adf4537930062786b4c21b3174ea5b51b3ba32c3e6ca15b447cf5fffd6c7bad8eb96b7cbc3fe4bd65bef0e0df0cffbbea358b5e468d3f9d5fcc9c3bbdc3c81ae82cf35e445f7953238abdbcf098f94335e09e26bae477998c9c2c238fbea584684cde98eb33ab19677af2594745940d92500b4b43bfdfb458ddb4d17bec85bfbdd6fda5f045ebad2bd8dfcc6fdb6849e5edbf137c85d4cfb742c592efabf64897ff5dc9638157aa6a6c4fa921428a3938ec73fd432305b9f30e046d62d12b0da95516726364fb89645dff595dc30cb54a7c8211dc2b79a7a3b05f3d27457cff91ff976d2bd67723f36d8274c6723e9fa00ec379e0d1b2222e3b0361e39b0bcd8725709e9f20b1c646613a55a2563945a8956e09ae2e9f12ec0c42069471256e83cec9a1d20d2bc08dde2247f74ae103750a5e2b8cef2fa53f3741b1020dcf8ff57ee3b3dbba5b925af2196ad51d65992c4ca997c786e55ef7ffa1081b1c6f78784ad6f655d16e507bbfd6f2cbf36e4ce65e1a83a44052ad87d581fd9fe40be150664774e9873cf817616014f0adb44bb5e43fbd603836dfce1ce0d9bf83deec068946c886ff341361ffacba8706ef7db6756beb318d5f920ff3e29cfefe78fe78fcc714a2d286c6dead5ca7548297c3960aa5a6e0ad438f29b8df73720b5454dea2a1976c485b35682fccf106fa58d8973bb4736a16c91827fbfa05337020eec52b3a78061a8211fddceeb86b1a44b7ccfabba19a27c26befbec21f4e022ad04974c6f55e52865abd0ac6acde6a11ebf3ae7103cd9e312cd6dcf4d89e3912c914c640901349854aa24c08c1158eb6c5f48e62e6c52b873b1f5537ae03f394807871843ca839ff509b19a2c856c0d17ab41b670553073cb2dd71afd46f4790fcf641dad6c3890db86c78c650fa9f9fe626ebc49e0219248cc4b3ad2de8c8c8ac68b932741ce99b6a5a7bc9e162a8c714dc94bff1ad0e88c0af9e232c792c9b57ca950e572eeca6b71cf25d29e2930c0b5e74481ac48296efa4937ec883ea42559a93b0a5eccc4a7f5809854f5eda453a329db62e1d410802882dc2acacfd32f0c7f5052804b1c1238467951b47cda969db39287dab1bd47510023a51998627fe0cd36d1f0685b136c9df081fe24ac7655ccb869310c7fa2a0b0c47fde24b59b3db8b0b9cda34b2349a5951bb4adcd8b2c7d8303171c57bb385b5adec5c214c4deb751cf21786e1ddac49aad9f43d493d25d67b225b375ceb6cdd1037398c2f55397dcd49027ec7ba90ffb9971f404b15f7547d57b5e33e4cefae39d86eca1f95651a9f90486dbb8f7eee1e724b4e61f4f902410a0b0238835a0b83e4fdd2214f5fa38b15d31b5ef4808690ef2fd77971a5e518a297718a2e9c9effed1dee845c61a5f921a1f17abe5104a87f764825f839da4120ee23ac089c48d334c33dc64bc379663d1d51547a0224e849b39c7af96633d046a56453c12767049419b0cc2256a24dcb5021d2b3126ca98ee42159be08b28a5dbc5a04eaefa9528a1b36af9617fe62f2eb6bfd6249c80d4ee84b13f0ff9ffe75b3a35cda30845e853b7bbb9dde0250465bf3e77980646e0906a0d909389726b729d9f2d19c6e68e8ec2f1d92a1eccbd984e18209e62389fea15b6812f3ba819ad743abae9785d847d022096fdc47f480a14b2de088f86f4f5725801413c7f164bbdf98cad4a68c2275dfdeda667d4ee9340a52c39cfcc3eaa5df5cd56ac6a8ee1d0fde3c66205af026b0d47fc380bbdc3b9539e69762efea8cbdd4ab382633fb4ac67e3f61fe2281483ee48ea17c5e5e0a798e0684662a35ed9a4292e0737b133ba621f408255151665ee4358e648b0f234c2b60c37490e72715bc1aa69ebd024de711774691353d792686e441b958771a06d96ce474e8b1546060d233ce1c8033e37e75900c74aa4c1b3bebe5f4c8032774d6d141d59fa652e4d596d6f68ffb523078f77bbac5f79f2e9ed5ec95b63d4ceb00bca0947e4b33a3946a5e388fec917f0b9d163e116c49fb1f439e0f576bcf997835f7e9411314a8e4d1381c8966561cfea39636d4cb6093637b8930ca08fbadbd45147f80806fbf1d04b0d19faa2080e5bfa0bd340d66c5249653280fbb6ce4ca6f2c2fc77a3071d6cbd430d871bf79d21994d13b5eb49c4339c5c7c68c590645ed1d80607dcfaa23dd90f276595032fce812184b28180ed9a2467b894e2e9a9aa27a99048138dfd09a1a97171270ad7ab7ffb361bed5ab622dc09fc05ef3c895628bef10bb859f2eb0ce92ea369ac60f75b5b7a9abef1aac245b99fb39e1985d70aa78562846b704922fc63b7d678b35fe484669a9571f173c3914b1d02d34e39b542549aa28e8ec978866e3629751c5f056032e9981d349ac58c13b6b589ee15555237cf9b76dfc0ee39c750b0f2c73a8ba567e8c9ed046b2d39852e56a3d868f18044fdb6c49acac02bfe7f3e2ee7f49a38d686cbf7d41cef17cab248bb29adbe32aabd568cee82840d4b2e70f088351f4f477979c49e1a303c8c179bced6a5b11f410928434b06701c73c826bf1d11a93a9b2e64d9e748a5adfebba53b30689e4d5f2e0f764e43478ff59a64dfcc700d2d5993b320d5fa41ad66352b7aa94021aef9dee6cba56aa43f49b1b1562080750ae6"}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="a714eda45824bf377f19d17200641341124848ba2962de55b58508d48e003774c372c31ca6dcb9cc7415c471d9ed91accb00c3ea4c11e7513c1402292c3c6bed8b515607a662c8443a4bec9106787a903dfa0f36840b4e8a127db0ea8d0f296c5754d35bc1e835e710ff1a6358bfc182685f62ec7f2caec0dda6aa8edbdd36e93cb4b68aa8375ab247e03a59c9ee69e4", 0x90}, {&(0x7f00000000c0)="85d1bbd222b14eafc36407c1ce7b5c4a3e301bf2e737dc197e6454ba8120044b813fcf0fbc45c79d5cb32f60be81b363bfc6dd40580103fcdb09092488cd8c301c3a1fad03b523784fca1a43b6f6b54df2be8b295c5ac4464dabc0197b119af34ebdbf24df0602f671a65ad89756fb79aea45956ac24bbbd59609441ef476a65df79d8a14569e417f099749fb9a66abe6247ccfcc4f35bf49465dca8ae2790a66d598c4344185abe99cbd9769318ee7db73b96e5991472517712ffd978887fa10fb848c140f1b5b9354b1534456073a92fc2dc69de00811b1f3bbf72eafe1a582e7d1e1226ac", 0xe6}, {&(0x7f00000001c0)="bdc2c9e2bade697b55f495f8c88efd79ab37467b9e502fef1967913d3213ba5b61e81dfab2a79b3f498fa40b636817b7cf8f9314d2f29a2d298e35a0ee9a03e3f0076b387acdca60c4d2be2934d76113a79940836bd1ac386d35ffcebf5a5937c24e788110d8c1dfbdf9208ba8e4b357fd08f3374cc729c4d092f4861d870620d144f29bfaf3ff1ea613b37a435d5a355fcdacabde51a3aacab2718824e189ba7c5946e1fe3e114d9301ef77389da6c8344533b5d46f7c29650ad3c14037cfd52910ed013272bbc17654cd", 0xcb}], 0x3, 0x4) 15:34:07 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r2, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x1) r4 = openat$cgroup_ro(r3, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 15:34:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$void(r0, 0xc0045c79) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/31) [ 285.283686] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.301599] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.330681] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.342816] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.348919] binder: 16272:16278 ioctl c0045c79 0 returned -22 [ 285.355714] binder: 16272:16278 BC_FREE_BUFFER u0000000000000000 no match [ 285.368381] binder: 16272:16278 ioctl c0045c79 0 returned -22 [ 285.375148] binder_alloc: 16268: binder_alloc_buf, no vma 15:34:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) dup3(r0, r1, 0x0) 15:34:07 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r2, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x1) openat$cgroup_ro(r3, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) [ 285.381475] binder: 16268:16274 transaction failed 29189/-3, size 0-0 line 3254 [ 285.396102] binder: 16272:16280 BC_FREE_BUFFER u0000000000000000 no match [ 285.405118] binder: 16268:16274 ioctl 81009431 20000100 returned -22 15:34:07 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffff9c) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x9, 0x200040) 15:34:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x1cxQ\xfa\xab\x9f\xd7kir*C\xa9s`rK\x1c\x90?_\x16RTqZ\xa8\xeb\xaf\xee\x9aO\x84\xbe\xd9\x88\xc6\x82M9F\x03\xcb\xf9\x14\xd5\x81p\xe1@\x1f\x99\nl\r0\xf3`\x17r\xd9 \xff\x99\"\x04s\xa6\x8d\xfa\xdb\xc9\xad\xc9\xb2\xe2I\x1a\xbb8c\x1d\xf0\xd0\r4\xf4\x8a?\xdb\x89BK\x06\xd3\xad\xe2\xa5\xac~\xda\xf4\xf2+\xc2\xc3\xfa\xbb\x1c') ioctl$TIOCSTI(r2, 0x5412, 0x3) perf_event_open(&(0x7f0000001180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7fffffff, 0x4, 0x7fff, 0x0, 0x17, 0x54, 0x9, 0x0, 0x6, 0x0, 0x7}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xfffffffffffffffa) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x1a1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) chdir(&(0x7f0000000900)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x0, 0x0) readahead(r3, 0x6b, 0xff) io_submit(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r5, 0x310, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xff, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) 15:34:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xc0, 0xfffffffffffffff7, {"0c49ea45b41ebf2c695f82595d08d5a2622bc63240c1851d2ab12edbbc68aa22ed596095101a626d397771d3879e2d4238165ebe1ae35c1995a1a89c78b0ae73069c15dd860e829a62ad901c291ce8eae208e6739060fa192f91ec8841444a2b6f21f6e79b8125457fda0d6d500f8f7b0a04d5359d3a355a8b8c6ed9fb2736a704c1a2b30384f05ae78b1be84ff5a67d8aa7d29d2a1d8a5cf42f16784248292bb012a4f96724da"}}, {0x0, "01a46651c709824e0417dd736b271fd15b3496dcec2e80d948b9083271d9644d1a72359b8f2bc90170193796b82c6558d2f41cb658693a23603f91b2dac999bd5985ada21df88993e48d5f136a9fff864c4d70224cc5d372c08fd58c3f48904e7b12b7ba0e320d602179989f05a59893667e4a8ba513f74f9eb351416b20e624d4995b0829dcf9a3b800e8d078c073bf823cda2521bd6fb10e7c83a5df4c4b09da342a0fff87ca8bf47f12c08963"}}, &(0x7f0000000280)=""/186, 0x170, 0xba}, 0x20) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0xbe, [], 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/190}, &(0x7f0000000040)=0x78) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$selinux_load(r1, &(0x7f0000000580)={0xf97cff8c, 0x8, 'SE Linux', "f7339871250c51c0e4096094804e2ab0faab685a446126531672338e14666b0604dae46a0b0ba29798ce10232861f0f37a12eadb35c716283e20d423ab7b925a0d149aad0d1ccf9f5b6b854ba1e44894dbe9436852ea79d4b90eeb21d984f1b36021b14327f64201b667aa1d79f320c77439a31d08761a4f16cc2e9aaa8cdc700feec5e735d523f4da33ecf3f1c030afbc28e88a1401d123f619b6a02a39d6b86c5ecc10f40f4da2e2152020490d925b18fb64a693137639333080b6cc1c3c"}, 0xcf) [ 285.427851] binder: BINDER_SET_CONTEXT_MGR already set [ 285.434892] binder: 16286:16289 ioctl 40046207 0 returned -16 [ 285.437435] binder_alloc: binder_alloc_mmap_handler: 16268 20001000-20004000 already mapped failed -16 [ 285.464801] binder: BINDER_SET_CONTEXT_MGR already set 15:34:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r1, 0x0) 15:34:07 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r2, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) creat(&(0x7f0000000640)='./file0\x00', 0x1) [ 285.477415] binder: 16268:16274 ioctl 40046207 0 returned -16 [ 285.486436] binder_alloc: 16268: binder_alloc_buf, no vma [ 285.521742] binder: 16268:16304 got transaction to invalid handle [ 285.526697] binder: 16268:16290 transaction failed 29189/-3, size 24-8 line 3254 [ 285.528241] binder: 16268:16305 ioctl 81009431 20000100 returned -22 [ 285.541549] binder: BINDER_SET_CONTEXT_MGR already set [ 285.558828] binder: 16268:16304 transaction failed 29201/-22, size 0-0 line 3117 [ 285.567068] binder: 16303:16309 ioctl 40046207 0 returned -16 [ 285.567169] binder: undelivered TRANSACTION_ERROR: 29189 15:34:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r1, 0x0) 15:34:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000003200)={@multicast1, @multicast2}, &(0x7f0000003240)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00a42c0100000000"]], 0x0, 0x0, 0x0}) write$selinux_create(r2, &(0x7f0000000280)=@objname={'system_u:object_r:watchdog_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7f, 0x20, './file0\x00'}, 0x53) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000380)={0x2, &(0x7f0000000480)=[{}, {}]}) 15:34:07 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x6000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) clone(0x1000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bafac7fd5fdc57e59fcd16174771db95393b515d334f239ddfbdf09fb2f8941c8ed34def3ab2fee21c89c1043e7aff771694ca3974fb119f496f") 15:34:07 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80040, 0x0) ioctl$BLKZEROOUT(r2, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) [ 285.579172] binder_alloc: 16298: binder_alloc_buf, no vma [ 285.586232] binder: send failed reply for transaction 926 to 16268:16274 [ 285.606817] binder: 16298:16306 transaction failed 29189/-3, size 0-0 line 3254 15:34:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r1, 0x0) [ 285.629556] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.652598] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.667074] binder: 16297:16322 BC_FREE_BUFFER u0000000000000000 no match [ 285.680988] binder: BINDER_SET_CONTEXT_MGR already set [ 285.689752] binder: BINDER_SET_CONTEXT_MGR already set [ 285.695273] binder: 16320:16326 ioctl 40046207 0 returned -16 [ 285.697290] binder: undelivered TRANSACTION_COMPLETE [ 285.701944] binder: 16318:16325 ioctl 40046207 0 returned -16 [ 285.713684] binder: undelivered TRANSACTION_ERROR: 29189 15:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x10000, {0x8001, 0x5, 0x1, 0x7, 0x4, 0x5}}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x3a, @broadcast, 0x4e24, 0x4, 'ovf\x00', 0x20, 0x4681, 0x4}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:07 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) [ 285.734150] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.743137] binder_alloc: 16298: binder_alloc_buf, no vma 15:34:07 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00\xf2yk\xb9\x10\b\x1el\xf8\x13^z\x04\x9a|\xbc\x02\x82\x02\x93nY\xa1C\xa1)U\xa92V\xbf\xa7\xa1\xc3\xb4\x97*tq\x8e5\x9bb\xbf\xb3v\xc7\x8a\xabh\xb1\x86\xbf2\t\xa4\xfd\x9b\xd1\x8d\x92>O') mkdir(&(0x7f0000000040)='./file0\x00', 0x8) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x280402}, 0xc, &(0x7f0000000180)={&(0x7f0000003180)={0x4664, 0x7, 0x5, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0xa}, [@nested={0x109c, 0x46, [@typed={0x4c, 0x22, @binary="0197579a84f191727b5c4461bd80353e078a0a0327b33b0e9f96e9917837814b7f692b7e0252b748694e3f1330ccb4a7f59f0406132ecb1db84fca4d486fe4e63cc86f6229c934"}, @generic="008e1c9c2b66c97340eb2127289651d3aa904c1c22bdad293b2f98fbfb316af62ea62f280e99fe71994a2171f05ced62555c1f2fe5c289e444c1c2f5fa9cf1e6a50f", @typed={0x8, 0x8c, @pid=r1}, @generic="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"]}, @generic="92596d5ced12dd278886eafb3b55f97ad4e0fba52eb7ffa9917e0bfbbf3ee6349c4fccbb98612c1ba5c04678518daba7ea0517a9e96369ccdd662c0e4b20c5da93dd6dcc991bb3494765ee388beb3a1eede1a332d7e2419af030", @generic="3f887264b9911e0d556f9835bb5984487e19857eef3ec70ef758a578a02b6ca64b6434f544624a3e50c9cdcc2a87b7100cedae79b6b8fa7fc6b0c9d2105fa2a84ca21b842835022227fbdd676d310e008a1ab721e4c102fb002c527a1e25a917dbc510c3250693d6d27946e71520ad3294b321ebb66109757563dc06d3cd0adac4a5cd3ddbe8ef02d21ba676e2e77f214d738c4f687f67042c3ab67f7452ad58e72a6f10bc65d926cf44ccdcdf662190092afa2eebe74395ee31c74eb7e6aa55a3d098da3a351c618e6402c864ff2f9d4726efb35a8e6979070abe99ee1e4124adb8fe1d484b1e9379fe9d3ec974b030e9a1fadc79fdc7f428493882f3896b4603279be374538178f0f6e446dd57057b410652b3306b97bf132f9a42801d7d43cf9ad163cd58e123c81dd826cfc69193dff4f20c8552d2b821e8a9c97b80917a50afa89180220e9a5e135c734e85b9d09e18e5185a312e5d40f1e1f52863518e32108be3072e0e80bea5bec27c208faf3d0e52d7188c3874d48702ca3f6853779307b96a36a35ed1f3ee95d1e9f874f4f3c006914277ecb5972c005c8894dcfaa42d0b7872f4dc53c9d0f53e89bbe96c0d87b111e2dbecf8ab926cf42fd9b602096831cd96c7478562f5a408ed6b1fb8261064c46488338c5d96321216fa0c5d8299839f851e2fe602f364ae7a3bc55b032b818ee31085d6b973347fa83652e8ba43345349d5ebdad250d2be6ceec4c0407efb7bdf198138779a886351d816446175a3a17fec04f8ec2ed55a89f96f0bee7784d67b7741458c94fb3f53dd11b158ba88cf7a51ebed6b6b300eb7b30c7db56e9c8a35b2f9f0dbf8048d0be04af859107d9fa9793e83ccd8279d4fadabcfa7b88f7b21ce3d06d9631d5feee9c7da147104973963ca883da2542c52f7795f654281702230222581bcc0a5318ba0c1970f442ec7459a13b174936e8e979566155c4eef3a74f0dc7f1c4b136433d2c5321e4bd71775b1bf72f17a8115dd0c4ab62b53e82ea03dbde93efb78d6f745e45ef44e40ac548b06a8040c15fa951b59d10fe8eb1fec225b21b972d8002793ad86723b3df4bc36551a865014e5cac75c13b4711f3b8d6bd90c9a9e8aa516446890d85836b1fb7a109d7962ed6381755e6a5129fd30e8660b03abc8c378ca1d1cc3ed94cd219a0abb4329d2c5b3030dfa53539601cd42461437a3ed239723fa0fa4515210ddb72ae9e7c03ee1e4105c8cffacc3ae0a413852b3671aa7baccf07b6a791b5dd303f20523b18aec257f7ca6cf067e89ea0c1cec71e76bcfade472c90f0dd4019230ca8039de2f0e2aea5c3eda7d279f5ff5a2db05926abcd1e025c877a03f551e48f5ae823edec834f3e30fd384f5646350ea864774bcb9ea6854a0526f95898b8d7130ab7e0fe5704bec39a4658690b898092232a96195aad690c086dd875ae0fb3fec2c16f8fc94ea94a13437831d19e0b4e1e7877a7fed9bccd0c5458208e78213cdcfb0a38bf5c4cf6b79f59dbdbee488d8a7d08c78e76fdef8f7edf1ae1c60cf69fe675942fe3e262047457b77dda770c42f78a87bfc05ecc83d87a6e0d6b81c19650a6259125ce33a8ea0cd312a5fefa1846f2490b9fb54bd01a24d429b0e3a248088c2a3a12ad8dff2ef4f97d415487e991ff0ddca3731d56057d5f9dbd6f98858a1f52382b9612837ab980ab48b21a6783d6b3bef75e3b64f571cd1189e796fb32c2fb9697db0cd80071c61245c4ece12a09eccb1fbcef781d71c2ec72ed828289ba10eb163c8bae2d3dfb8baadb2f3ed6c244070110c8348e9944dd552acbb97c517f02c403ca51cd5ccc2cfd1d8be08782a5c3067b0c6bf7f0e9b93caa027d361098f5cfae683fb192db1a82440fd0bca2979833ba82d5fc73649124aeb30ddb4e5860e02c8b007e0d9109a3fbbf0227140596a91ebac9283826f3314fc8b4a7f8c8e45c362ff7dafa7e26e429228b30394077057c57413e7d67e2ca56f8d1be65c87112f5abe0f2a9f7e2b011a3dcf484c3b6ebe469ccc87bc7131ded18ca76ce4a3e1d8318428f758a23b22ea312c45c58d467cc9067a89bc75c1de750867b71e504b4b01e2621305261251f02dd7ced4ea8659f81a469c64f0641661727f9c8dc34c2ea19dfe0061063ae31a4a0f946b4ff2232cd7c8b6d572e9852debd21d7a4f2bcd50e7007089f443782db14d0182e9d05208b4465b2aeb0ac57f5bfce7405f501477834bb4e371eb7d51e79c8f1bf3f8b19a38f291a3b83e1a54ec7c1baf99c470744d92e558eee21b6c1dd93f49905c9ec34e8d8f3bba0bd92be8071a6ed444fe3320e316a09b50e8f5e412c4fe7a2a12932744ffb88e65820f61d9578f8acc3fc23e6ab0a49563b47d175ea85f44f6f02752ac00d8bbdefb6a18a5298b4a7995de8ee147fe9919a2a3000450e7e0a9cea06f0ccfd82f5b583b4f3b8e9fd8ea2ab757a647bae6d5b180f9788b48d84b9f090384af56a0354d7671b6997275145e38eb0996343905ad95fb91707a57fb7d0302f4d4f93cdc346b72ec04b7ee08544c638360c189fd0a2ba6283e586ac40e839f3f1d41a293bde8e1de7dbbeb66801f89bb62bd4f47599392fb9ab3f25a1e0cf95b67e2aba0c4a579833e9dcc57c06b7c0bd2495d66f10e4258a05c20aad1f4bd3727332e408ed604e3f12f76d09944df245a510a8be498336032779e3cf4c4f2a0f2b13466f010c9461b545b7410958e4072b060b3a57f1b2c02d013c5756d2106a0fab6df4ee55bcb442e6d47bfa02f32861073fb9aec8d8ae683f5dc6541711164b732ad162ded7f91df2da30bce1d1eb3b14671ed80ef53d096102faf9eca3f7cc6e78b443e9ce0d5125908a65e182d242e82a24f8a46ba02d4e1335bfa0572c5076618d63a3d6775135c2f2c012cf94d76355ec66597b8b292fd6bd25ac6ed3fd582677313925e478ea3b5c5f1e5b3454354f383eabfb0b26741455e9a662620522266a8cc132e885eff20fcbb0af9bd6d1d8fba0eb50def8d90f083983333e04432e294dce15fd3ef87eefbb9f52dc01b77a76e40240665daffc8d94d8a3b4f455ccf0b3f951aa091c7b3b37810a684639cb1b8d8ac58610f4d0c0e48881fe32aef7b0791fb37db9c95843ac200075e8edcd24c6bbf9a15d48b0c0a0e2dbe6d401c4d2682f3a8f8bbc7f40f862587b200081ba3fa40b27e0b093f3732121dd64116c9814e5a46e35a634ff1ee097be4112a9b095c9d443f19094930f80b1806e00d7d0c68306f454c4e7612eadb4c715f2008bbd63e8d4e56bc2acf9b0dfbd27dd28d9a16a026588a7c28232a000da825aa33e86d8b1ea620da43bec8769509e679a16af5a15823287c9f7e49a4fc5a5958cffba45d83a9df597d24ffb0def3f94951fa2dfbbac5dd95e43ce71b93f469423d0d3a051fb73db396719af8126e62ae358f501ea1c2514080e86309edf89e8db6639d3a30ce92ece5bfacd477892f046057315beaf62e660d788b545a694091e08a4aea9c93fc476778f7fa273b8dcf6ba9514fb0c98ba42550e932881078cc00e55ae2251f97f7bcb802261738e667f82b6c405b07d97f1ad5c57285ce37f4bc489c7a5c17f720d8bd13f5a9759bf078816528e173ad60c8ea5f2a91287adba8699af216f23b29b3b883fc3f04a30d3736a856cf6c7bf9c8f8edbac1ac19eebf0e8a6971bd68b92cc7ee697cd48fb1ef72844d6030ff2880a1d7f69ac48b88c92bb0afa32d055bd89983bb6a04c0712e0a380bd397050f867e50f9fe55295810b792e6ad4cc349683e03d55a6977d1b550a0994cae5af37987574d3d56c256321f4f01d00803969f1b4e8929401a05368277ccc38fceb3e8a1caa691e4a7bebf6f0c3f4a77861eeaa6acbf359e9c2325bd6ba9bd8c1beb42206e25ba42b2343dabce57b48bc9537e73db2481ce6c48d7407a7583b7e74aaa35c9a9aa7bd5981fd1d7c5a26b54e68e635de556b0bdb3fc4d44d356f8ac7b5a9bbd1a5338526d3de440ff3db5feba6ad6181e97d245c7022a5d42ebd1ba2f393ade0aaf3f0dbeb131765bd4db76bb30fa0b0b9103c3e2700d68d04dcb20b8ab1ad0694d8efe2bbb4c0fc88d7a39495878aceffd7bd10894315b1ff5f07b7c6ec275d02cca25c92c0548c65a295430df228c4ccb7b27b6f32658b93e37c9eb6c923e107d8014aab922dcbf3f6d889db241feec5723cf63c027c0a825f885a214e8bf4be48398ea00dadffb75a3e94bd8e852a9998b2ef9b9ec6ac704280d6a5bd2c23fb49ee1d93160c28a60fb40b25cdd1880931df0e7c38ec96f1905cc4a3be17cc81d1f5b22ab757baa4415a3cc0a57094033da7f35f0502cc1bbd0d1625e1ab7b74f97419e3d4638e167534013f45295e455e107bd178e33f1c9c85a240b5408a02e109f45ac5c0d836282c876e83b60f54396a605e91e72d262ae5a9091f66d90d9c8f77f2b0c88c5e844ebf875be1079dee87f77ac2074f03b3adb0233b7a33e18775779722f24721230192f35f1bfb5d4d0d85cffd55b1833d6231c29cddc4df9e46ae7c57d90c976a6f1f5b25afbbbe50c32041c3e703def3f95093f893899b0e2ab988f71d764d52a545d3c97a42a50a5f4c7f439e5b3927bb26fca29e150fec3e33eb04cd31713c77175a95ea71ca92b70962ad1f90f38bbeeb93ab42a56d656732207138f9a781d9b6b658a6aa608382591a423413e3a12c98c6ed4fd9b24da983ea5fd90773942efbc080ad9ec56ebba665ba8f0f56d833e82336277502608154568e5e6e87d931cd897e679896e9b58778527d2903a49cd73acb1e40b71182ec6d7c1e4143db694e9f3eedcc341977bf4cd70e0debe94bf469432d964b13156bc5ced20b1a63af546d84bd63b115d3f59a4cf710f43cc5f526913fc6ef5e28e898e753130f3a992541635d86e50bcc6daf42d4edd94975e9c1082c3494ae338ed502c06fdb72989ed82ec79351482eb40caeb91cc5451a6c220b268d1f4756e21cc3d0040dde7ac91925775accc2679d6640905114fdcb2dd08e86f249dbdd52ab90790397cc159a0fa38a08179a6ba344ac8bbb493fdbfb05424d64e29a123266b841eb7e1235ea174c07e972652d3522b10c4949f47ac4b8eca4a8d8b37c5ebc61e3350f0ad369b5f4ce20b6d17f0d9d33255ffed49dd57b913ae96a9c9bd03ec01d216a6de16d8cab5f117e5f04e1f1603839fe40f18f303aba62b5b8236b93b05514731fea8b39829162f45b9ee6e4a90dfea79005f009ae0ec044bb0a3ebb6b152d3920c43478ec90840049be878a8004793de4e3a234b84c6b136483cf1e77cf236218090d45b20fca232c95ae50ec41c4238922bbda5252b92ad6bfc5d6fef5da3fd6e80dbb4df673da1ccd26df6285633160003d55e6fa56e91360d3f53f5d27cb840d1653804a45431cfc1f2682944807912ca982a33d15164253f4aa5212c90dfe85afc48f84e26f31d68175f5138b132949329cb56107c5a0991849efe28d85b11bd56aa35e7f4b8fbcef0bdc02e6c0bde67704f8aa2b961e13af7ec63cccd1d89b542e223b9b7cfce5b62262e3f0c296f6a84acc75116f27d2ff31ca67bbce1d4cb21fddc97fd1715e991612bfbbfcb7080dc150f7a3d385afe565330785d7d96d8f6e6136a5a9fa327291388418c1d607feff873d57a583361bf398c14844a72372e1127480749b23d0a61c75bb0cbe1c624063584aed38885b6d22e75c37d2dd803087b603cefecc4a02ce1fea1705cc1e9efb14d5c1f305660e3275949dda8551a0b37ddf6", @typed={0xe8, 0x5a, @binary="e8fb4dee3869bc121e6f26fcaa02ff4d85a368e5d34f660a3536ee81e186aa7aaeb0c9439c623e35555f911598df2625804003dda3d4e0f58ea41077b40eefc53e195a84b18e2687f74efaab2d657f62a9ef0c1c5f1c1684c0a71860cadc390967b872e258f2f4c7e745e5212f8811df452a5e7769c6cf5b04e13b1b038e1f59ec486a2235dd00b0b0947cec6d010bdf29f81be8552833d288a83066a65bed910995aa13245da7142ae59ee76b33384aa5ea8aba6aa65278c2bc2cf99463653bd9b853a3897f6b7910b30f8cae73955f4e1d65c968c1f7d046b218efc3dc2d73e4f4"}, @generic="93d87a517eb591adb3a34fb3f7f151f807a8ff602bbb379818cba09ed1e8143e6849f87f5fd8f4e8a4eb3902e59e80b7924ecad63bb25e8fd6bfa572b0351551d0acd6f993daebef62615f5a15ed6b106ed0355eab93a8169bb5859426af9414b11334eb6021c9b8867327c9e26e8c5373808eb13ccf73bdf8fda9957a4170419f66bba6ec38f74825d98201b6df6600c109541920f618b6c2b1dc3655a7b881fa4b6e592cb9972cc0e4c98fd33c231e03cdbe70df0088cbd4725a69cbb17cca8f1f203555764def5c9ed0b5c34c79e27fc0ce426af2c757d6b8e512f6007d389a9a6f1f3d790dcd5f84631871", @nested={0x1174, 0x72, [@generic="aa6ec95a9d2466184a01be0f96859cd313874e4f205015bceb03930bd2f12da39cc2887249845ac6e28b74b006aad047ddc7e6d832c77c72abc0da10a3d6aec9f16e869472093d4921f94cfe308c68da", @generic="ed25011670d9b7f8344a48b04c5010a7720c9b66ceb35db7f571506bb5c0bc721cdbec25b47fd6bdc835e196685c2317d0a6f610859ffed8397975bd45834cfd6015bfa8a99bf2946e1a7ef3a08732cbfa7bc83ff65fb4ab358ef7dce8321d39334b8c61f0d9126aa46ea51c8623e3ea57eeb1448bc50c6a8a2eed4a361b4a75e81198e013e0c84eb5412a2965068928a6a56bd647a813278c225068b5fd10716e694308f59e505a587d9cecb971ac8294eb48b922c26221f7e0dc080e79a389b1afc55838a1f33124b6f2732edca83262737d", @typed={0x8, 0x8a, @pid=r1}, @generic="ddf0d7d3889fb76e4469100b20951b8a62b132f6825fcf67bf166b0d180fd350fc34000e8fd4123bc20db9dcbebda180dab8d991c2576c89e2feeb00ff4801f96a13", @generic="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"]}, @nested={0x1210, 0x95, [@generic="1d042c5d42df85b99c361a4533e4a5351cd5c11659988631e384b4e54d8e38b1166beda1f35865a5df7def0323bab4a122bb622e", @typed={0x14, 0x15, @ipv6=@empty}, @typed={0x8, 0x1c, @fd=r2}, @typed={0x8, 0x92, @u32=0xffffffff}, @generic="936b84301988b1e091db8e4e72129a13d42113ea33d151f715d19b0d256865a0df3bc57bf35ae3937854100b55098198e7254d54ab8f587512d442e547a8ca0c04ce65eed6bce410e337d540d84df088d584fdf50021", @generic="6e13eb61d87487b19fc73775bbf3b0c86f3781c58e5efbc9f22740002b3afdc2798243cedd74cbf1d2fe0cae85dd8cd7a616a5034c60e31e548067be7905a8957521f11a38785f75fcf3daa86792e22d8ab4fe7da448dd0b75096fa35c4c484d594635bf24dc4ce86dfe2c11acd4894fd2271f5525a6e5c12259bb597a947c5a701f594e7669572954e50f148be0d9cb9e4b0b837dde0dd35039f6b99ca90019fddfbac132071f4330baf9fc222f475e6d8361", @generic="a2a3b4f0d65fd75560c3a7272ab708ab659981a7f4ac4954738681476ea170613c17d6c322cb39e099b2e0d4a6f8fc6da506827880759483c5af44cedec212398dadec086d8848e0b51868b64594735c0de0bc6d2818bb0d1698ef355a94be44ad32d878b36a9bbbdc760dbe77b35229dbe26cb33c6321372170030e62b5972173221f92b5b2b833754c0db966c591002730348b3ef28b453debc175495f2bf65c", @generic="1e555a6380e3c1fcdbf3d033ef03b75efc35dc70dde4661e1070880a980ddd0b71d9be6a466c7f1d99b727f7750dc3d894b353cd5e2b0769197b39a7e778bc98581c9bec2325489240f0c21d1d0e2d8556fbe6faebe09fb77cf0db783a03e865d7cfbe3889e0e49f67e6a8edef30dc6607424d7848b9284c06a7a70ccf1f4e22c9b00e788a9b14b9133ab87108e3e2bee8e212e98dc30f847c7cf08a6a81ccfee786bccb1cfce1c850efc368ccf8311d22f639297290a6b628582f86312ef4a6a1f96ab222e833fc5bc3fa5f23e8f8546c0d4d2e33318618148134eb10012fc15ecbbb9749f6b2e9560b80a32542870e687296c917ad214d91b4b51ad6ac2e2a8c60f277f9abfeadd722d4b3a8fbfb1c76d9480b2bef1a42c16951cbfde12af85e2870d9335666a9edede553fb6a0ceabaf7b64a41ed822421e6170a16ca8e2b960eb8fb62d34df98452f3981de46b9740bfaf7d1aadda4610e5399f2993179d28b2472f474526d477a1cd2760a801157683a447885b0704f48c8d8daf128a97bf81d6c9d3b9d8829b7c10ff3524055d375490e84328e71f3d9119c545591cd978858b13038aa2c945af830fcd9a3cc6fa09b604298a7f43bd5890650c81e8087df94b9aec19b7d06d31039420b3d5e852eb4edd39a42fa29ecb243776faac1a1fa5eee7e114062c1110eedaf29279af36f34f81468ec491ac68440d50124af497b1524be17f6366e20511c3fa93195643486e0810e8e15941966681e58074af871194258139ad91f514922dae6995675b805f92493765c95f840e58751afcc19c722b2c964ea6e9eab3e73e3b4b55cd1d2254f5e724499658b04850cc02e48aec9b232f60dba9b53ae01928a2e0f214d204232413ad643645ffab65353db473ee34edeab30779a1bb1b84039b73ea1e4a134f34f4db23f2fed424f877f2bc5d7ad241b30d8cba2710ffaf37d472df73d55e7f77f3a2421fb92027be13b6001395b8423fe40e29e62a65458096e8e7f04bca7294531566be78153ed3b46ed69f996163d8784d5e43dd563d2d1a59b895fd328f7baaf19882a9029b585cbf916136f3be6c7d275614806fd11005822f6debd0dac4dc88358cbe118c43f1ef39bb50adfb90f044e53c1c3cf5896aded5e0bcd440c8570751c2122a00a22fde2af3331717a988fc21bbd4df27349bfc296533333b42d9b79c389d9fcdbeea6975e22d0f9a4da1e6d120b82d63f04bc81f5b6335a64e1e7b1d6b1e8cac160acdd9513c43de577b7a5651242a52a6d042276e6ba57f2ed8362c9a88d3269acd299e812d020eb10841d4a745f16c42dce389fc1d29505b61e8d3cb0d4a9ed8caec1007261c8dc7bc1a77b9c18748886615cb76963900ca9bec121e73b7f3f492207fa7712294454d2c97013a891473f7bacc0df42949a7015f6d9bd4f61c82873733301b884592064dbadd322c1268f399858b6aecf7e8f6fc6b146c11d5dd92ee8aad67366bc7de9358a3bdc2a6acf6c7d78ca69e8b343520e6830841736b8316f8f485abbc22dc5d3463d20104f235a98e60e782985e374c8dcd2419ec7846e5f1c017867e1dc13c1e7e3daf62c85104c0b92b9b18aa36823f13b61eae4971bf77a66df85b2887cc0c137fb1b95a7f9f3435d19bd6288fe144b5d63383c7c1cd04c4e196d1157c7f20164d701161e523f6bba482f8f5d651d82d578d423944c16d75984058b0360a9d0dab267241b9bc00e20c4a41a0742151bdb86cec7dc61a88baab8424b4d2148ece3af7ba8e677d3fcabac1568820711f96d55f818c65b31846e035dc5733bb877e9a832df0f566aa088e9b003935486d74fe59eb251ff3ad1a44ac2bdcf620e39579b1916cc579ded677d9cbbedc4451d1b9fb955b1bcc6671ee097704829364c3d9456f8ec43bacf5261427661374e0dd666e5a61b2c60ac453a5ee15868d600d3df52af2fa7653dc91f24b5aa5f7c9dc90c9f254b78abf1067262c09ee1bbf5c50aba81827469f347badc1b230d98e1f3d7f53e839aa93674ce9445e24b09c1894fe671ec4ea3338f71dd8abcd18b8beb61b2efccb5b0523cb3ecf99dca872915abb7d8e02641dd1ab3e8f772c5475bc9a583d7d0e920e3d26eaa2bd1bca7275e70a13bdbfee89f45f2bb2fcebffaf16a1609188b705ff6dccc9735fcaf518648742a15e70efb0356f30913e3f078795c8395cf8dc056ed1241c62bd53ac022efb46e1513bea6a43544577c6c8093e564d6da6248d452050f80b1f19eb74458c5bcd6f8d15e7da5a9a37b17864ef2e38baf5c8f7c5f76cc77e6ca72db4ce52120a78d64dfa375274b04b8ee512f1a1cd1f13d2bce08523ba13fcb929eefe9b869f3676e81b8f1765aff25a612ad49ec89ec4172b2f203b25e037d09d10643d612142728992c70b7be9e5487cabb17ec0328176ae04b6ab4abe763a9ae8eb97f56d19e37f008c1430bfe4e8051c1bbc28b00904ef4d7a0b8aca066617443967f56d53b3bd1d42c7dfd9fc13319e5f8048a96ad2d58ac3b26a8a31412f7c0b16fd86b3c277abaec1a3efc5bf49b1a22270f1ca7ce620dd654876c8e1c748dc1432bc3b7b15b4dde87a1b66bdd6dea46aba9be8c3a76cc4a516c878f94adb56d7784d08fb0da2cc0fdb114f94408a0a0a1becdc5ad5402e2ebb90778ee434ec6ec9bce8e5bd5d7000fb627ea6dc762142516cf59ef641a7529721dc278405f5861b7eb17f9835be5b9b93dfbb966e40cf5482359291b58100056f26f7dcf48e98770e0d52dc67db166239079ee312f042a3cf7ba3244f9c8b5f20d8fbce090cbfbcb55c73702457933c3d0ad1df92b1c827bf5f6d9b0ac09c7c56ebeed620dc780cd458222b35edaf86388bb897f1d258a575c13cec67b1a914c91e5b37e23a781546108997c0befca98763dc0e4834c9cc19b5af8ed3b1d28de2bf5f9bf223337d2b6f587e4a3daf1087053f0d1cbe99ae8bf9b989a7c21a0e65bd23d8a1501a51c4aea68395f5b804417a75e5498b6d78d9df90b313a23adca484ae5e35a26e925e8d3bcac5f1639eeb21b5ceebbb81360318e0c2c2cc412517c43bf989784f3e974d47d9e1abeba6dc98a2f08e444bd38825d50cdd560f54a6b3f8a60bb3cd2b22f2c2a8798fdc9b3d209e5bcc23c7536dd60417d3d4a394cee13552b165034c1ca6c89d5ca2103caaafbd0dc0abd9decf881853f54811a638f734c0dd2d38685e3648892a22254c6eb14c18abbfa417d0eb84524b70128fbe0829c9fb2e3479e7e74aceb3732c93f9119a06e961fbaa96bcbe8d4d6b09ba20c1fec5fadf2a36e6fc35b01ae8e19171cac57cb7ae4be3872f5ea6f955c87a17ee1c834684b306023eb7d7cc6fa2f30b78efc1372299c3bc978430474860433682aaf1f05f88f42b9b573b61d54629a163ce5f015813605dda745ca82a3ada66cde9feab00ee3d727e2e959fab465c8bd49b199ef333ea265bf5b39d86c2b31ed6e27e4765bd99db843278d9ed3120a33bf382b116cfb9087dc803d6a74a6c12cc05d3473aed833b53936288d4cf051375bdac74f4b66f42bb9c0945af393118d234c30346c7578f4e204e1251e3a585f48da200ad82bb9df0c7fd0b2b289572668d41a64437b32523c7eb2d61d34c965dec3cb93ed203f48b0c9a6a3fd24d6bf4e0a412a81db1070a2de3e4e0a746c5f1a19076c307e99654983f70b764387d5fa1e6582fbb1f3ca95b9493a8dc0006d0850d569f2a28c73f2a1f8875836c1166b0d1fcb037e0d4452e44ef43f2e7a71391f325ba2ca1a9db2a2aec346228e801ffc08235d53ecfb559be9a583bc1dfa6db06bc44af79372b07d658b9baac1aafad3d6ab845f899ccdf8ba9568b042e94bc2c09b4dd97786c38461a13c9d6a5519a282520a92d4743478df43945368ec89af18ec870f09c1c15562ec9f9e7ca4f6e4725c3324dbd89947eb5305516cabac3c2084f1a507c655bfea522a58a597e9b9956cdd8a4ad6098418ce7c665b511c159656d98a489293b9bc0d1f6a22ecbaf9da1bd8aeeaabd28693c7b7b7dfc2902a04feb86ec3a205e232bf687e03df9b17fbeae2b651fdeddc2619603d3eaca784da5fd478c0bc0fba605a6379a092f99813c8a191210120ede92b5097d7eac6c9932f85bcd9d93d27baff8fe12a9a5d88bd24ff0129ede8b4412cec5d4f2ae7db66fce195c6e2e5b521462d252b0fc2a228a704ab2b7ee02d345fbadc5250970e55f047c018f1dfd26d30999c186d985ac8b92a80933cfa79a1b603d6b3a73b19b8038810608bba0f0b72e13ac0477c645f17c06e26fcab1b402752584bc66690d3a58ae59a9b33d320478e474edad390a27c6e8f6d4afdd35ebd64348c54c004caf2587e02276636ee8d754d932bae4099452f1d3f71d8cc36f90d70a17eb772392572ccda946c76e1876ad935030ec05e71643153b5b6f70740e9c0dd4cb9bb22d4069c956e7dbe8ee8a2b7639780b1e92dcb16cafd2ac2908d8f3cef8f56b53bf0e8e0e9d1dad791d650375725e507f4250a962d7ca76b75c573ec4034a364e4eda398766361efcfb770743349494d6e62aee5506c9c2eefaf163d822350a81c2b59912f1e10d8b49c968bf2bd6db6d9596e45047bd61ed6ac5f041d518ccab66b73452e45dfa93ce7e88266c393434d1567751bb617a3a48f2f0f352e07d8389a1f53d0e77a10a6ebc22403469a3d4c580504726883ee6898f7c1208a9d943be055d61620df6f848b5ade89a5f75266d5853ce24690357a82e0ee2a1cdab73d104438ef00d74bb8c6877a15985339de7c4a5ea563ec47d9e6e8d784e13f3f5550267c07a975914931a98f58b6f64f18005e51729ee2868d0b4efe187fad1708c2a813a96ea6e6cfaff7a219aa7930d104afd38ccc686eaf498e3009e74ff9f6ac83ce38336eda2aee3377cbdb5caf4fd7a3f596644f98093fe4af10dace239d42db6f9160270c795328c6d08bbb6460bdbc7aa2500bf9f405347e66b98700d65f06481e41a3911e569d89ae6ada39efa57cad3306fa10d6294527bd4eaefa302eab3e57f16b38e9d1b44a0ef7d0208f3d453ad2c104be7051b814749a54e02d84282df6524af12f0235103eb8e5665d5670e90310aa712588620e75b4cfbf55eee5e5b89c45aba86bcda125a67129defd8e7b258a1c27631b2ed3307c3936ef5961d4e9d9471c9f582e27b25881e1abb3df83b7058cc45ebd6635e428bbc141707e6088d8c5d1140258d229b6c0366c37efe795822adddfcd109910d12cb25643c17a77f93349f60a22c33318b7ae6b6aede783ef2a662b14af00b475967f73567439540412ce80abe74836919cb7416859965ccc22b799f88008463740e76559aea64c7d279dd0543c8b945bb18b25e0e533c4c5ad19568232ddce51dfcf27934df310a4f6c9d8469d7861068c0d5cdf140baaf4105ae7f01f467d5fafec4bd8de7458f399b95b06ddbad1e2412e499bc93c99dc71119d8e164261bb839bd1d0ab9f3ee2b9e7690e1ac8d209080cc4cd63f1abc03ffa3ad76b02df2d7eb9c3fe516f629faab313253f2219dab9759ee45dd43d6dc7afa587195eb25ffcbdc20199f5b49665015fb98befebdb7b1296d6ad60b7190e4063f4e082fef47dfd56a060cee86ccde39467473631740afb3ea0a266ee64411d20dee1a7b472480cfe81d6e590f98063a7c4a407b7bac4ae8fd1b7e6c8469aafd9cfa9ffc7e3b8a589e97bf30503a2f26781aa99a2cf6811ec053d2b62a4ebc6e76e843662e445a837a9af2d67239fd7f799fa0ea", @typed={0x8, 0x95, @u32=0xfffffffffffffffc}]}]}, 0x4664}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 285.778590] binder: 16318:16334 transaction failed 29189/-3, size 24-8 line 3254 [ 285.786648] binder: 16318:16341 got transaction to invalid handle [ 285.812783] binder: 16318:16341 transaction failed 29201/-22, size 0-0 line 3117 [ 285.812794] binder_alloc: 16338: binder_alloc_buf, no vma [ 285.834463] binder: 16338:16342 transaction failed 29189/-3, size 0-0 line 3254 [ 285.842261] binder_alloc: binder_alloc_mmap_handler: 16318 20001000-20004000 already mapped failed -16 [ 285.852380] binder: release 16338:16342 transaction 937 out, still active [ 285.859311] binder: unexpected work type, 4, not freed [ 285.871356] binder: BINDER_SET_CONTEXT_MGR already set [ 285.876732] binder: 16318:16325 ioctl 40046207 0 returned -16 [ 285.885840] binder_alloc: 16338: binder_alloc_buf, no vma [ 285.893779] binder: undelivered TRANSACTION_COMPLETE [ 285.901656] binder: 16318:16334 transaction failed 29189/-3, size 24-8 line 3254 [ 285.909295] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.914981] binder: send failed reply for transaction 937, target dead [ 285.922253] binder: 16318:16325 got transaction to invalid handle [ 285.928771] binder: 16318:16325 transaction failed 29201/-22, size 0-0 line 3117 [ 285.937753] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.949345] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.956616] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.962247] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.011118] binder: 16297:16308 BC_FREE_BUFFER u0000000000000000 no match 15:34:08 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) ioctl$BLKZEROOUT(r2, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) 15:34:08 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03632640", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:34:08 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) 15:34:08 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') r1 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = request_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='eth0,\x00', 0xfffffffffffffff9) keyctl$assume_authority(0x10, r7) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}], {0x4, 0x3}, [{0x8, 0x2, r4}, {0x8, 0x4, r5}, {0x8, 0x3, r6}], {0x10, 0x3}, {0x20, 0x1}}, 0x54, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 286.098760] binder: 16359:16363 unknown command 1076257539 [ 286.103420] binder_alloc: 16362: binder_alloc_buf, no vma [ 286.104987] binder: 16359:16363 ioctl c0306201 200001c0 returned -22 [ 286.110417] binder: 16362:16366 transaction failed 29189/-3, size 24-8 line 3254 [ 286.119275] binder: 16359:16367 unknown command 1076257539 [ 286.124193] binder: BINDER_SET_CONTEXT_MGR already set [ 286.124203] binder: 16358:16364 ioctl 40046207 0 returned -16 [ 286.126067] binder: 16362:16366 got transaction to invalid handle 15:34:08 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) [ 286.143893] binder: 16359:16367 ioctl c0306201 200001c0 returned -22 15:34:08 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') 15:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) fdatasync(r0) [ 286.188428] binder: 16362:16366 transaction failed 29201/-22, size 0-0 line 3117 [ 286.202866] binder: 16369:16376 BC_FREE_BUFFER u0000000000000000 no match [ 286.210684] binder: BINDER_SET_CONTEXT_MGR already set [ 286.216144] binder: 16375:16378 ioctl 40046207 0 returned -16 [ 286.226479] binder: BINDER_SET_CONTEXT_MGR already set 15:34:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) [ 286.232153] binder: 16369:16376 BC_FREE_BUFFER u0000000000000000 no match [ 286.242168] binder: 16362:16366 ioctl 40046207 0 returned -16 [ 286.249138] binder_alloc: 16362: binder_alloc_buf, no vma [ 286.273832] binder: undelivered TRANSACTION_ERROR: 29201 [ 286.281838] binder: undelivered TRANSACTION_ERROR: 29189 15:34:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffff5, 0x0, &(0x7f00000000c0)=[@free_buffer], 0xfffffd0f, 0x0, 0x0}) splice(r1, &(0x7f00000001c0), r1, &(0x7f0000000200), 0x9, 0xa) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400102, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21}, {0x6, @broadcast}, 0x20, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 'syzkaller0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, r0, 0x5, 0x3}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000240)={{0x0, @rand_addr=0x7, 0x4e24, 0x0, 'wlc\x00', 0x1, 0x100, 0x43}, {@local, 0x4e24, 0x10005, 0x4, 0x10000, 0x2}}, 0x44) 15:34:08 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='^cgroupsecuritywlan1\x00', 0xfffffffffffffff8) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) 15:34:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xfffffffffffffcbf) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b4010000190005002dbd7000ff13df250a2010ff361befb4311f704afc03ff040002000008001900", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4], 0x1b4}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) r5 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREADLINK(r5, &(0x7f00000005c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000540)=""/45, &(0x7f0000000580)=0x2d) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x186, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper], 0x0, 0x0, 0x0}) [ 286.290980] binder: 16362:16380 transaction failed 29189/-3, size 24-8 line 3254 [ 286.306043] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.311592] binder: 16385:16394 BC_FREE_BUFFER u0000000000000000 no match [ 286.312212] binder: 16385:16395 BC_FREE_BUFFER u0000000000000000 no match 15:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f0000000880)={0xa, 0x0, 0x0, @empty}, &(0x7f00000008c0)=0x1c) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:08 executing program 3: clone(0x104000, &(0x7f0000000000)="a82b1131591331c8199caeca69abe743f9a64761b04ece87a1ecdabe1052c4fefe66b8199ceab819e899a923e08fd171310295a58be8fedfbf2cde1fb0b199015e409086283a8ad2b66d411aaf8c6068d0b1d068f418e839cf2dbd6ae26a6eea38e50175f8ba6b00371e129eb359ec9aaab99d6c59d8227ca209921e2862b960d9d0472c2e3ac30a799fc64c82d08f39b33981abfd2298fc0466098a48a9a0aacb85f9e657e68164d06ff9e07347533a829e23b5c448e25f3c7a7662de554526be039cea274b2fa07d526678ebdb8f3fce425f55ad3da34502f1d98acfde6539b8612dccc6ef959ddde8ba392a590b824958", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) utimes(&(0x7f0000001180)='./file0\x00', &(0x7f0000001200)={{}, {r0, r1/1000+10000}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = getpid() ptrace$getregs(0xffffffffffffffff, r1, 0x8, &(0x7f0000000440)=""/222) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) ioctl$BLKZEROOUT(r2, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) 15:34:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) 15:34:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x28) fcntl$notify(r0, 0x402, 0x1) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x4e92d9f2df5f8010) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 286.394108] binder: 16405:16410 ioctl c0306201 20000000 returned -14 [ 286.400639] binder: BINDER_SET_CONTEXT_MGR already set [ 286.400649] binder: 16404:16411 ioctl 40046207 0 returned -16 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) getpid() r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) ioctl$BLKZEROOUT(r1, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) 15:34:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x224, 0x16, 0x0, 0x70bd2b, 0x25dfdbfd, {0x1}, [@typed={0x8, 0x36, @fd=r3}, @nested={0xc0, 0x3e, [@generic="7b15993a28c8316fa9cd7e64df233a8087131cab7677cfc8d32147e8b344e4b13b4cd4a62cfd09ea671dbddfbb9aed6022244b053cd89ddc924f7974503175db83f00e1db113b4a3c869fadddd531be726e5532405e2dd1782132e5ebd0d291a254d290489d6ae81f6a223c47e1e16aa9de87da8d8ce8377e8200ecbe3ac5cb7a5d270ae9f4996fd14a591801b7445161e3a99a82e85e205ced84acb73d6e53a8483b0782045a8deedb0b38ff0df3c1c9042ff643fcf08cdc6cc"]}, @typed={0xc, 0x3c, @u64=0xffffffff}, @typed={0xc, 0x3c, @u64=0xfffffffffffffff9}, @typed={0x8, 0x30, @uid=r10}, @nested={0xac, 0x47, [@generic="d7b01b6da222687ab7fafe0b18b45e4ec03f418a82b000b4d19a4a392915b8ee741cad5ffecce9768b37fcff6a1cd479ac8361e83c7c4cb387fff7d0bdc06a2253c297dece446be571cdeaac", @generic="173e7bbbdbdf4a9065ef98e9b9a051dfc5351ad9268a8a78d5666bcf08dd6bf1710f2ebb263961cf4e5c011f7daaa4d8e3b325b090054b5714ea687d158b282ee979d20c1aa874e539f5158efaa31139e91a3e4e65d60d5673"]}, @generic="7744e41ee18621118780fa5ebad7aa470bc79fac2649d02d64a186c3f2ed30b3f67682d0173a0b8617ef93e147917ca4d320dd3f5f7e032764e66c26dd60778d15c5c30dbb6b435251abb65ff82d90f68f6ad5bbc025448ad04bf505c39b346885fadd0381b3d4d62878399600e3408ca87a20fe8ce68845", @typed={0x4, 0x3, @binary}]}, 0x224}, 0x1, 0x0, 0x0, 0x4080}, 0x20040804) getpeername(r0, &(0x7f00000007c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000840)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000009c0)={@multicast1, @dev, 0x0}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @broadcast, @initdev}, &(0x7f0000000d00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000f40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000001080)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000025c0)={@empty, @multicast1, 0x0}, &(0x7f0000002600)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002640)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast1}}, &(0x7f0000002740)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000002c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002780)=ANY=[@ANYBLOB="08040000", @ANYRES16=r4, @ANYBLOB="010125bd7000fcdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="f800020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff0f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004006407000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400f300000008000100", @ANYRES32=r9, @ANYBLOB="4400020040000100240001007072696f726d7479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0400020008000100", @ANYRES32=r13, @ANYBLOB="800002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="7001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400c5080000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400400000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x408}, 0x1, 0x0, 0x0, 0x4000}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r21, 0x40087705, &(0x7f0000000080)={0xaa, 0x9}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r21, &(0x7f00000010c0)="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", &(0x7f0000000340)=""/31}, 0x18) dup3(r0, r1, 0x0) 15:34:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0xb01c0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000000c0)={0x7fffffff, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x88) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 286.473237] binder_alloc: 16420: binder_alloc_buf, no vma [ 286.479140] binder: 16416:16423 BC_FREE_BUFFER u0000000000000000 no match [ 286.494084] binder: 16405:16421 ioctl c0306201 20000000 returned -14 [ 286.507907] binder: 16420:16425 transaction failed 29189/-3, size 0-0 line 3254 15:34:08 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x240, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x6080, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x30000}, 0xc) 15:34:08 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) r3 = getegid() r4 = getgid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000180)=[r3, r4, r5]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) [ 286.551682] binder: BINDER_SET_CONTEXT_MGR already set [ 286.570681] binder_alloc: binder_alloc_mmap_handler: 16420 20001000-20004000 already mapped failed -16 [ 286.582516] binder: 16428:16437 ioctl 40046207 0 returned -16 [ 286.587499] binder: BINDER_SET_CONTEXT_MGR already set 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="8eb817b61eb59be4bc8b77af9d41a61ac1e5bf4bfce0995738f420294b58004978e6a433e0f89f54374ddfa1a8a2b3551793c97d35d77d0308ea15f672ed85a2149df66a34329937f5e9e4d9148635a95e07799b76fd4390a4c1745bdbf8271c05ff6e63b7c3a227f61f2048a74ae92d2dca31e293bcb10c61d8", 0x7a, 0xfffffffffffffffc) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) ioctl$BLKZEROOUT(r1, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) [ 286.595415] binder: 16435:16438 BC_FREE_BUFFER u0000000000000000 no match [ 286.603859] binder: 16420:16425 ioctl 40046207 0 returned -16 [ 286.613900] binder_alloc: 16420: binder_alloc_buf, no vma [ 286.618666] binder: 16443:16448 BC_FREE_BUFFER u0000000000000000 no match [ 286.625868] binder: 16420:16441 transaction failed 29189/-3, size 24-8 line 3254 [ 286.631754] binder: 16435:16451 BC_FREE_BUFFER u0000000000000000 no match [ 286.640440] binder: undelivered TRANSACTION_ERROR: 29189 15:34:08 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000040)="096fddb1eaa6ef171aa0e34865fb4fad73c5b7ac154f3898f81086cb5efb6d9b9620d8786b9153e415c5d399499b522ecb4ede063c177fccc9726aa353ad177dc44f1c564ca02a1be94f7b8f019b1e21a2dff425311b757064b90d6666dffad8fda406aed32443658d4f7f0d48864063fb901858324c54afcfe37d2ae369d0ebbedcd6c92b49d55de250356af2e30a242f545435d96c726b33c3f9548aee71d2f1345aa612dc0ee58891fb77df80dbf45382a59e0fe986606c56649691e0466de93241b2f6e1e0e0e7432acbb413b1fab272b03e6542e9eb20d9d551c5b932174a95398300fc468398ffa5a64363bd2a5b1e23") [ 286.652429] binder: send failed reply for transaction 952 to 16420:16425 [ 286.684104] binder: undelivered TRANSACTION_COMPLETE 15:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="bf0000000100006409bef3c88d752cb220a728ff88cac9b01a7abb02d968289ef4c6d29a9f58db9ecee9d6e372d82151d0d68f49517c3aa101e08ed229529a9fb1f8e3a08201943ab67968b1a2239b47caf2b5103eb9c0eb7a4c6cd6690ac6a1d98cc8aae15e569d1bd4aec6b9ea5fcd86ff9a9655aab48a8b575b53f1993ca808098ddf2cd7fc14c8a82b92957a61274362221292e192ce7a900e6851ed6619b08451c0cfe70ca2901270c5abeb0de2278cc7a49c878c9cae6f8caff30be6ec359ef143a1ea8cadcafdda46481203b11a2584703c6474", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000e8ffffff00"]], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') getpeername$packet(r2, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000011c0)=0x14) getsockname$packet(r2, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000001280)={@mcast1, 0x0}, &(0x7f00000012c0)=0x14) r7 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="0557516adf51ce29cdbcc4da92c3530dd714e79f0dfde42820fa8c4ebe82877a247f68c0741891dc8e242c1f97767280a572f2da470fe1def4b36f7a58ca0171d36fcb4d64b5dc46ee9efe67aac9eb2142029987a9a4aacfe4e38bd7618fab9ff49a29bba6d0b78b38f53fd63f666073ce0c908ec8dc90c668ccbe6f7077", 0x7e, 0xfffffffffffffffa) keyctl$revoke(0x3, r7) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001300)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000001400)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001500)={@local, @remote, 0x0}, &(0x7f0000001540)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001640)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast1}}, &(0x7f0000001740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000019c0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000001ac0)=0xe8) accept$packet(r2, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001b40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001e00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x20c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x140, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x0, 0x3, 0xffffffffffffff97, 0x5}, {0x0, 0x3, 0x5a1bf072, 0x3ff}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x60, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0xee, 0xd7, 0x4, 0x3}, {0xfffffffffffffffd, 0x7fc, 0x10001, 0x8}, {0xb0, 0xff6b, 0x7, 0x100}, {0x5, 0x9, 0x0, 0x100000000}, {0x5, 0x1, 0x9, 0xfe0000000000000}]}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000800)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x4b9}, {0x2, 0x4e23, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)='veth0_to_bond\x00', 0x10000, 0x40, 0x100}) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xf0, r13, 0x202, 0x70bd2b, 0x6, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x19}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4884}, 0x81) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x60040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x0, 0xfffffffffffffff8, 0xff, 0x4, 0xfe, 0xa, 0x400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:34:08 executing program 5: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000040), &(0x7f00000000c0)=[0x40, 0x20, 0x18, 0x20, 0x0, 0x38, 0x78, 0x38, 0x68]}}], 0x0, 0x0, 0x0}) 15:34:08 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/118, &(0x7f0000000100)=0x76) 15:34:08 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80000000004a0a) ioctl$BLKZEROOUT(r1, 0x1277, &(0x7f0000000040)={0x0, 0x41400}) [ 286.700499] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.719921] binder: undelivered TRANSACTION_ERROR: 29189 15:34:08 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003140)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005400)='ns/net\x00') r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r2 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x40, {0x1, 0x3, 0x1}, 0x0, r1, r2, 0x529dc319, 0x80, 0x8, 0x7, 0xfcb6, 0x5, 0x56, 0x5, 0x100, 0x2, 0x4, 0xfffffffffffffff7, 0x3ff, 0xfff, 0x6}}, 0xa0) 15:34:08 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000"], 0x0, 0x0, 0x0}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) [ 286.767378] binder: 16464:16472 got transaction to invalid handle [ 286.769173] ------------[ cut here ]------------ [ 286.778408] kernel BUG at drivers/android/binder_alloc.c:1130! [ 286.787237] binder: 16464:16472 transaction failed 29201/-22, size 0-72 line 3117 [ 286.809456] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 286.815361] Modules linked in: [ 286.818563] CPU: 0 PID: 16473 Comm: syz-executor.0 Not tainted 4.14.108+ #39 [ 286.821814] binder: 16464:16486 got transaction to invalid handle [ 286.825754] task: ffff8881a4279780 task.stack: ffff8881c6b48000 [ 286.825770] RIP: 0010:binder_alloc_do_buffer_copy+0xc7/0x500 [ 286.825776] RSP: 0018:ffff8881c6b4f5d0 EFLAGS: 00010212 [ 286.825784] RAX: 0000000000040000 RBX: 0000000020001000 RCX: 000000000000033c [ 286.825795] RDX: ffffffff82237477 RSI: ffffc9000194b000 RDI: ffff8881d49c7bd8 [ 286.838523] binder: 16464:16486 transaction failed 29201/-22, size 0-72 line 3117 [ 286.843842] RBP: 0000000000000020 R08: ffff8881c6b4f8b0 R09: 0000000000000028 [ 286.843849] R10: ffffed1038d69f06 R11: ffff8881c6b4f837 R12: ffff8881c863ef98 [ 286.843855] R13: 0000000000000028 R14: 00ffffffe8000000 R15: ffff8881c6b4f8b0 [ 286.843864] FS: 00007fc787f85700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 [ 286.843870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.843875] CR2: 00007f8937479000 CR3: 00000001c77ea002 CR4: 00000000001606b0 [ 286.843884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.843890] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 286.843897] Call Trace: [ 286.854171] binder: undelivered TRANSACTION_ERROR: 29201 [ 286.856519] ? binder_alloc_do_buffer_copy+0x1ef/0x500 [ 286.856534] binder_get_object+0x90/0x190 [ 286.856546] binder_transaction+0x1e2d/0x5640 [ 286.870292] binder: undelivered TRANSACTION_ERROR: 29201 [ 286.871441] ? check_preemption_disabled+0x35/0x1f0 [ 286.871454] ? binder_inc_ref_for_node+0xba0/0xba0 [ 286.895687] binder: BINDER_SET_CONTEXT_MGR already set [ 286.901448] ? perf_trace_lock+0x11e/0x4e0 [ 286.901461] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 286.901471] ? __save_stack_trace+0x7a/0xf0 [ 286.901486] ? __might_fault+0x104/0x1b0 [ 286.901498] ? lock_downgrade+0x5d0/0x5d0 [ 286.907441] binder: 16476:16480 ioctl 40046207 0 returned -16 [ 286.914641] ? lock_acquire+0x10f/0x380 [ 286.914651] ? __might_fault+0xd4/0x1b0 [ 286.914665] ? __might_fault+0x177/0x1b0 [ 286.914678] ? binder_thread_write+0x512/0x1f90 [ 286.914690] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 286.927397] binder: 16484:16492 unknown command 2 [ 286.929213] ? migrate_swap_stop+0x810/0x810 [ 286.929226] ? binder_transaction+0x5640/0x5640 [ 286.929241] ? lock_downgrade+0x5d0/0x5d0 [ 286.937756] binder: 16484:16492 ioctl c0306201 200000c0 returned -22 [ 286.942610] ? lock_acquire+0x10f/0x380 [ 286.942621] ? __might_fault+0xd4/0x1b0 [ 286.942634] ? __might_fault+0x177/0x1b0 [ 286.942650] ? binder_ioctl+0xd48/0x14ea [ 286.956836] binder: 16484:16494 unknown command 2 [ 286.961722] ? binder_poll+0x230/0x230 [ 286.961733] ? __lock_acquire+0x56a/0x3fa0 [ 286.961741] ? perf_trace_lock+0x11e/0x4e0 [ 286.961755] ? check_preemption_disabled+0x35/0x1f0 [ 286.966727] binder: 16484:16494 ioctl c0306201 200000c0 returned -22 [ 286.971940] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 286.971952] ? check_preemption_disabled+0x35/0x1f0 [ 286.971970] ? binder_poll+0x230/0x230 [ 286.971983] ? do_vfs_ioctl+0xabe/0x1040 [ 287.109877] ? selinux_file_ioctl+0x426/0x590 [ 287.114353] ? selinux_file_ioctl+0x116/0x590 [ 287.118829] ? ioctl_preallocate+0x1e0/0x1e0 [ 287.123218] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 287.128824] ? __fget+0x1ff/0x360 [ 287.132259] ? lock_downgrade+0x5d0/0x5d0 [ 287.136407] ? lock_acquire+0x10f/0x380 [ 287.140375] ? __fget+0x44/0x360 [ 287.143724] ? check_preemption_disabled+0x35/0x1f0 [ 287.148724] ? security_file_ioctl+0x7c/0xb0 [ 287.153112] ? SyS_ioctl+0x7f/0xb0 [ 287.156631] ? do_vfs_ioctl+0x1040/0x1040 [ 287.160776] ? do_syscall_64+0x19b/0x4b0 [ 287.164822] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.170161] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0d 04 00 00 48 8b 6d 58 48 29 dd e8 33 33 0d ff 49 39 ed 76 07 e8 29 33 0d ff <0f> 0b e8 22 33 0d ff 4c 29 ed 49 39 ee 77 ec e8 15 33 0d ff 41 [ 287.189265] RIP: binder_alloc_do_buffer_copy+0xc7/0x500 RSP: ffff8881c6b4f5d0 [ 287.202085] ---[ end trace 56639f2ad980718b ]--- [ 287.206881] Kernel panic - not syncing: Fatal exception [ 287.212601] Kernel Offset: 0x2d800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 287.223504] Rebooting in 86400 seconds..